Coinbase CLO on US Treasury Cyber Breach: ‘A Failure to Prepare’

• The US Treasury was hacked in early December. 
• Coinbase CLO Paul Grewal said that the Treasury was unprepared for the attack.
• Grewal hinted that now the US firms will be more hesitant in handing over clients’ private info.

Coinbase CLO Paul Grewal has raised concerns about the US Treasury’s lack of preparedness following a significant cyber breach on December 8, 2025. 

The hack, which gave Chinese hackers access to unclassified documents, has sparked widespread criticism. Although the Department of Treasury and FBI has launched an investigation into the breach, Grewal warned that such incidents could undermine public trust in the Bank Secrecy Act, a law requiring crypto firms to share sensitive customer data with federal agencies.”

Coinbase Executive Questions Bank Secrecy Act Mandate

In a post on X (formerly Twitter), Grewal referenced a statement by an MIT researcher, claiming the Treasury was “unprepared in several critical ways.” He argued the incident raises concerns over the Bank Secrecy Act’s far-reaching requirements, which mandate crypto companies to provide customer documents when federal laws are violated.

The crypto community has long expressed concerns about exchanges sharing user data with US agencies. The recent hack amplifies these fears, as Treasury-held data could be vulnerable to future attacks.

Blockchain’s Role in Strengthening Cybersecurity

Grewal suggested the breach may discourage US individuals and firms from submitting sensitive customer information to the Treasury, especially as the hackers remain at large and the investigation continues.

On X, Tanvi Ratna, a digital asset strategist, called the breach a glaring issue in the government’s cybersecurity strategy. She recommended adopting privacy-focused measures, like blockchain-based systems and zero-trust models, to minimize vulnerabilities.

Read also: Coinbase, Ripple CEOs Gain Profits With Pro-Crypto Election Victory

Ratna emphasized how blockchain technology offers privacy-by-design features that agencies could use to safeguard sensitive data. Zero-trust models verify access requests individually, limiting exposure to third-party risks.

The incident has sparked widespread discussion about cybersecurity practices. On social media, users suggested hiring more skilled experts and improving the overall approach to digital security. The hack has also prompted calls for reforms to ensure better data protection for citizens and businesses alike.