Coinbase forecast a hit of between $180m and $400m from a cyberattack that breached account data of a “small subset” of its customers, the crypto exchange said in a regulatory filing on Thursday.

The company received an anonymous email on May 11, claiming to have information about certain customer accounts as well as internal documents.

While some data — including names, addresses and emails — was stolen, the hackers did not get access to login credentials or passwords, Coinbase said.

Still, it will reimburse customers who were tricked into sending funds to the attackers.

Hackers had paid multiple contractors and employees working in support roles outside the US to collect information.

The company has fired those involved, it said.

Separately, the New York Times reported that the US Securities and Exchange Commission (SEC) was investigating whether the company had misstated its user numbers.

Coinbase shares extended losses after the report and were last down 6.5%.

“This is a hold-over investigation from the prior administration about a metric we stopped reporting two-and-a-half years ago, which was fully disclosed to the public,” said Paul Grewal, Coinbase’s chief legal officer.

“While we strongly believe this investigation should not continue, we remain committed to working with the SEC to bring this matter to a close.”

The SEC declined to comment.

The latest developments come days before the company is set to join the benchmark S&P 500 index, casting a shadow over what was expected to be a landmark moment for the crypto industry.

Security remains a challenge for the crypto industry despite its growing mainstream acceptance.

In February, Bybit disclosed a hack in which about $1.5bn worth of digital tokens were stolen — widely described the biggest crypto heist ever.

“The cyberattack may push the industry to adopt stricter employee vetting and introduce some reputational risks,” said Bo Pei, an analyst at US Tiger Securities.

Funds stolen by hacking crypto platforms amounted to $2.2bn in 2024, according to a report from Chainalysis, a US-based blockchain analysis firm.

“As our nascent industry grows rapidly, it draws the eye of bad actors, who are becoming increasingly sophisticated in the scope of their attacks,” said Nick Jones, founder of crypto firm Zumo.

Coinbase has refused to pay a ransom of $20m demanded by the attackers and is working with law enforcement agencies. Instead it has established a $20m reward for information on the hackers.

The company is also opening a new support hub in the US and taking other measures to prevent such cyberattacks, it said.

The Nigeria Internet Registration Association (NiRA) presents its report on .ng domain name registration and renewal statistics for the first quarter of 2025, highlighting the continued expansion of Nigeria’s digital footprint. The data underscores a consistent and significant adoption of the nation’s Country Code Top-Level Domain (ccTLD), reinforcing its pivotal role in the burgeoning Nigerian digital economy.

During the period spanning January to March 2025, a total of 40,791 .ng domain names were recorded. This figure comprises 22,236 new registrations and 18,555 renewals, indicating a healthy balance between the acquisition of new digital identities and the sustained commitment of existing domain name holders to their online presence.

Analysis of the registration trends within the quarter reveals a notable upward trajectory, with a 13.92% increase in domain name registrations observed between February and March 2025.

This growth signifies an increasing recognition of the importance of a localized online identity by a diverse range of stakeholders, including individuals, startups, Small and Medium-sized Enterprises (SMEs), and larger organizations.

Notably, the .com.ng extension continues to be the dominant choice, accounting for over 60% of both new registrations and renewals. This reaffirms its status as the preferred domain name extension for Nigerian businesses seeking to establish a credible and locally relevant online brand presence while maintaining global accessibility. The sustained popularity of .com.ng underscores its perceived value among Nigerian entrepreneurs and enterprises seeking to secure their digital real estate.

This upward trajectory isn’t happening by chance. The Nigeria Internet Registration Association (NiRA) has remained intentional in its drive for digital inclusion and domain adoption. Through public education, training via the .ng Academy, outreach campaigns, and partnerships with stakeholders across the tech ecosystem, NiRA has consistently advocated for the importance of owning a local domain.  The current standing of .ng as the second most registered ccTLD in Africa reflects the efficacy of these efforts.

Digital adoption in Nigeria is no longer just about being online—it’s about owning your digital identity. And with a .ng domain, Nigerians are better positioned to assert that identity, connect with local and international audiences, and gain better control over their digital footprints.

As we look toward the rest of 2025, the Q1 results serve as a strong signal: more people are embracing the digital future, and the .ng domain is increasingly becoming their first step.

National Identity Management Commission (NIMC) of Nigeria has launched a new digital identity verification tool called the NIN Authentication (NINAuth) application.

The initiative, which forms part of President Bola Tinubu’s Renewed Hope Agenda, aims to strengthen the country’s national digital identity management framework.

The launch builds upon Nigeria’s comprehensive unified digital identity system that has been transforming access to financial services and government programs.

The NINAuth application introduces several key features focused on data security and privacy.

The platform requires explicit user consent before sharing identity information for Know Your Customer (KYC) processes, giving individuals greater control over their personal data.

The system provides seamless access to various government services, including SIM card registration, immigration applications, passport processing, tax filings, and financial transactions.

The development follows significant investment in Nigeria’s digital identity infrastructure, including a $45.5 million support from the World Bank as part of the Digital Identification for Development (ID4D) project.

As the official service for integration with NIMC’s backend infrastructure, NINAuth enables secure verification processes across ministries, departments, and agencies (MDAs).

The application is available for download on both the Google Play Store and Apple iOS App Store for users of the National Identification Number (NIN).

The rollout represents a significant milestone in Nigeria’s ongoing efforts to digitize government services and strengthen identity verification processes.

“NINAuth is a cutting-edge suite of services including web, API, and mobile verification designed to enhance data security, protect privacy, and simplify access to government services,” said Dr. Kayode Adegoke, Head of Corporate Communications at NIMC.

“The platform introduces a robust layer of protection, empowering individuals with greater control over their personal information.”

The implementation supports the objectives of the recently established Nigeria Digital Identification for Development Project Ecosystem Steering Committee, which oversees the country’s digital identity initiatives.

President Bola Ahmed Tinubu has approved the launch of the NINAuth app and directed its use for verification and authentication across all MDAs.

The application provides a secure single sign-on solution for accessing government services and social protection programs while maintaining strict data privacy controls.

The centralized approach to digital identity management represents a significant step forward in Nigeria’s digital transformation journey and its commitment to modernizing government services.