.jpeg)
An amended class-action lawsuit filed in New York accuses TaskUs of systemic security failures and actively concealing a data breach that affected Coinbase customer information. The lawsuit details a sophisticated bribery scheme originating in TaskUs's India operations, where employees allegedly photographed sensitive account data for criminals.
Key Takeaways
-
An amended lawsuit alleges TaskUs concealed a data breach impacting Coinbase customers.
-
The breach reportedly stemmed from a bribery scheme within TaskUs's India operations.
-
TaskUs is accused of firing investigators and misrepresenting the breach in financial filings.
-
Coinbase has terminated its relationship with TaskUs and offered a reward for information.
Allegations of a Coordinated Criminal Campaign
The updated complaint asserts that TaskUs's public statements did not reflect the true extent of the breach, which involved a "far broader and coordinated criminal campaign" potentially implicating "dozens, if not hundreds of TaskUs employees." Plaintiffs claim that TaskUs took measures to silence individuals with knowledge of the breach, including firing human resources personnel tasked with its investigation in February.
Concealment and Financial Misrepresentation
Further allegations suggest that TaskUs continued to inform regulators of no material breach and proceeded with a $1.6 billion buyout by Blackstone before Coinbase publicly acknowledged the incident in May. A February Form 10-K filing by TaskUs reportedly did not mention the Coinbase breach, implying the company was unaware of any significant data compromise.
Coinbase's Response and TaskUs's Actions
A Coinbase spokesperson described the incident as a "criminal bribery scheme" that exploited external vendors and a small number of Coinbase customer service staff. The crypto exchange stated it promptly notified affected users and regulators, reimbursed customers, and strengthened its security protocols. Coinbase has since ended its partnership with TaskUs and offered a $20 million reward for information leading to arrests and convictions.
Legal Scrutiny and FTC Act Violations
The amended complaint also expands on claims that TaskUs violated Section 5 of the FTC Act, which addresses unfair or deceptive business practices. Legal experts note that ignoring FTC guidance can be viewed as carelessness or misleading behavior by a company. Courts and regulators are now evaluating the sensitivity of the compromised data, the foreseeability of the risks, the effectiveness of security measures like encryption, and whether TaskUs's security promises matched its actual practices.
Sources
-
Amended Lawsuit Accuses TaskUs of Concealing Coinbase Data Breach, Yahoo Finance.
-
Amended Lawsuit Accuses TaskUs of Concealing Coinbase Data Breach, Decrypt.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.