Coinbase Global, Inc. and its top executives are facing a class action lawsuit that alleges the crypto exchange concealed serious compliance failures and data security risks, leading to substantial shareholder losses, according to a complaint filed Thursday in Pennsylvania federal court.
Lawsuit Core Allegations: Omitted AML Violations and Data Breach
Investor Brady Nessler filed the suit on behalf of purchasers of Coinbase securities between April 2021 and May 2025. The complaint accuses Coinbase of violating U.S. federal securities laws by failing to disclose material risks related to its UK subsidiary CB Payments Ltd. (CBPL). In July 2024, the UK Financial Conduct Authority (FCA) fined CBPL £3.5 million ($4.5 million) for repeatedly violating a 2020 agreement, alleging that CBPL onboarded 13,416 high-risk customers between 2020 and 2023, enabling $226 million in crypto transactions despite known compliance gaps. Coinbase did not reveal these breaches in its SEC filings, the suit claims.
Separately, a May 2025 data breach is central to the case. The complaint states that overseas contractors bribed Coinbase employees to steal customer information, including names and partial Social Security numbers. Coinbase confirmed the breach in an SEC filing but stated it refused a $20 million ransom demand. The plaintiffs argue that the company should have disclosed these vulnerabilities earlier and that its failure to do so artificially inflated the stock price.
Stock Plunge and Investor Damages
The lawsuit highlights two key stock price drops: 5.5% on July 25, 2024, after the FCA penalty announcement, and 7.2% on May 15, 2025, following the breach disclosure. Together, these decreases erased billions in market value. Investors who purchased shares at “artificially inflated prices” seek damages, claiming they suffered losses when the truth emerged.
Defendants and Legal Proceedings
Named defendants include Coinbase CFO Alesia Haas, CEO Brian Armstrong, and the company itself. Legal counsel for the plaintiffs comprises Edelson Lechtzin LLP and Herman Jones LLP. The plaintiffs demand a jury trial and class certification. Legal experts believe the case will hinge on whether Coinbase’s risk disclosures adequately addressed known operational flaws. If the court finds Coinbase misled investors, it could face significant financial penalties and set a precedent for crypto industry disclosure standards.
As of press time, Coinbase has not publicly responded to the lawsuit. The case could have far-reaching implications for how cryptocurrency exchanges handle regulatory compliance and investor communications.