(Reuters) – Hackers stole from accounts of at least 6,000 customers of Coinbase Global Inc., according to a crime message sent by the cryptocurrency exchange to affected customers.
The hack took place between March and May 20 this year, according to a copy of the letter published on the California prosecutor's website.
Unauthorized third parties exploited a flaw in the company's SMS recovery process to gain access to the accounts and transfer money to cryptocurrencies not related to Coinbase, the company said.
"We immediately fixed the error and have been working with these customers to regain control of their accounts and repay them for the money they lost," a Coinbase spokesman said on Friday.
The hackers needed to know the email addresses, passwords and phone numbers associated with the affected Coinbase accounts and have access to personal emails, the company said.
Coinbase said there was no evidence to suggest that the information was obtained from the company.
News about the hack was previously reported by the technology news portal Bleeping Computer.