Operational Risk, Not System Failure: Lessons From the Coinbase Case

Coinbase has confirmed the arrest of a former customer support agent in India linked to a data breach involving the exchange. The case is important not because of what failed technically, but because of how access was misused internally.

Investigators found no breach of wallets, trading systems, or core infrastructure. Instead, attackers gained entry by exploiting human access. Support staff with legitimate permissions were bribed, allowing sensitive customer information to be exposed. The incident later escalated into an extortion attempt.

This is a clear example of operational risk. The systems worked as designed. The controls around who could access what, and how that access was monitored, were the weak point.