Coinbase (Coin) expects to pay $ 180 million to $ 400 million to customers for the data violation on its platform.

The violation took place on May 11, according to the company. The bad actors were able to access customers personal details such as name, address, phone number and masked social security number.

“Based on facts that continue to develop, the company has currently estimated the cost of being within the range of about $ 180 million to $ 400 million regarding remedy costs and voluntary customer dim decisions relating to this incident,” the exchange said in a SEC archiving.

Crypto Exchange said in a blog post that it will “prove customers who were tricked into sending funds to the striker.” It has also offered a $ 20 million error crew to anyone providing information that leads to an arrest.

The confirmation of cyber criminal activity comes three months after Sleuth Zachxbt on the chain claimed coinbase users had lost $ 300 million to social engineering scams.

Coinbase also said the criminals secured government -ID photos, account balance and company data. Two-factor approval codes and private keys were not broken, it added.

Exchange -fired staff involved in the on -site violation and referred to us and international law enforcement. It will also press on criminal charges.

Coinbase did not immediately respond to Coindesk’s request for a comment with regard to Zachxbt’s claim of $ 300 million.

Update (May 15, 12:48 UTC): Updates heading adds details of the violation.