ShadowMap

Dark Web Exposure for coinbase.com

Credentials, devices and data found in dark web stealer logs & breaches
100
Exposure level: Critical
coinbase.com scores 100/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 19 days ago Last 90 days -16% 0% reuse a top-10 password
Employee exposure
corporate accounts — @coinbase.com
3,731
leaked credentials · 427 compromised devices
Top exposed employee accounts
coinbase.com659
coinbase.com/signup284
//coinbase.com/signin haris.al***@gmail.com100
coinbase.com/signin80
//coinbase.com/checkouts/53729faaedeb4e0f55000025 jodinwindmas***@yahoo.com74
Where staff accounts were caught
https2,025
http311
www.coinbase.com223
c74
6full.circle648
Customer exposure
stolen logins for coinbase.com
2,678,157
leaked credentials · 9,522 compromised devices
Top exposed customer accounts
nicolas-melen***@hotmail.com65
mahmud.kaisar3***@gmail.com65
twins***@gmail.com50
ralfniza***@gmail.com43
idayvie3536
Most targeted services
www.coinbase.com1,539,108
login.coinbase.com304,191
commerce.coinbase.com17,968
beta.commerce.coinbase.com3,797
accounts.coinbase.com2,545
2,681,310
Exposed Credentials
9,532
Compromised Devices
6
Credit Cards
1,923
Crypto Wallets
16,853
Auth Tokens
28,802,394
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Okta10

Most common passwords 0% reuse a top-10 password

(h***ps646
12***56543
gw***17327
@C***rt311
De***d.287
WO***98274
@C***ud265
ht***ps251
AZ***OM243
Pa***rd241

Stolen sessions (active cookies that can bypass MFA)

youtube.com928,984
google.com508,491
pubmatic.com310,398
bing.com301,250
adnxs.com298,588
criteo.com238,005

Compromised despite antivirus (AV installed on infected devices)

Windows Defender430
Avast Antivirus21
McAfee18
360 Total Security12
Kaspersky9
ESET Security8

Financial, crypto & app tokens

Crypto wallets
metamask865
phantom449
trust131
exodus92
coinbase83
rabby58
App / session tokens
Google14,818
Discord1,627
Telegram408

Where devices were compromised (by country)

Mexico [MX]102
Colombia [CO]64
Peru [PE]58
US58
Argentina [AR]50
Top cities
Lima30
Caracas14
Quito12
Acapulco de Juárez10
Buenos Aires10

Browsers & apps affected

Google Chrome (Default)1,479
Edge [Default]1,185
Microsoft Edge (Default)1,182
Chrome [Default]1,004
Google Chrome (Profile 1)329
Chrome [Profile 1]257

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.