Company Details
taskus
36,825
405,961
541615
taskus.com
13
TAS_1545658
Completed

TaskUs Company CyberSecurity Posture
taskus.comTaskUs is a different breed of BPO. We are a collective of highly capable humans, who understand how to deploy technology and data to best serve your purpose. From Digital CX to Trust & Safety, AI Services, Risk + Response, Consulting, and anything in between, we consider ourselves responsible for protecting our partners’ interests and supporting their long term success through innovation and technology - powered by ridiculously smart people. TaskUs partners with the world’s most innovative and disruptive brands to protect what matters most and to thrive in an ever changing world.
Company Details
taskus
36,825
405,961
541615
taskus.com
13
TAS_1545658
Completed
Between 600 and 649

TaskUs Global Score (TPRM)XXXX

Description: The breach involved a **coordinated criminal bribery scheme** within TaskUs’s India operations, where employees were allegedly bribed to photograph and leak sensitive **Coinbase customer account data** to external criminals. The conspiracy expanded beyond front-line staff, leading to the dismissal of around **300 employees** in January 2025. TaskUs reportedly **concealed the breach’s scope**, silenced whistleblowers, and fired HR personnel investigating the incident. Despite internal awareness, the company **denied any material breach** in regulatory filings (including a February 2025 Form 10-K) and proceeded with a **$1.6 billion buyout by Blackstone** before Coinbase publicly disclosed the incident in May. The breach originated in late 2024, affecting **less than 1% of Coinbase’s monthly transacting users**, with estimated losses reaching **$400 million**. Coinbase reimbursed victims, severed ties with TaskUs, and offered a **$20 million reward** for information leading to arrests, refusing to pay ransom demands.


No incidents recorded for TaskUs in 2025.
No incidents recorded for TaskUs in 2025.
No incidents recorded for TaskUs in 2025.
TaskUs cyber incidents detection timeline including parent company and subsidiaries

TaskUs is a different breed of BPO. We are a collective of highly capable humans, who understand how to deploy technology and data to best serve your purpose. From Digital CX to Trust & Safety, AI Services, Risk + Response, Consulting, and anything in between, we consider ourselves responsible for protecting our partners’ interests and supporting their long term success through innovation and technology - powered by ridiculously smart people. TaskUs partners with the world’s most innovative and disruptive brands to protect what matters most and to thrive in an ever changing world.

TP is a global digital business services company. Our global scale and local presence allow us to be a force of good in supporting our communities, our clients, and the environment. We deliver the most advanced, digitally-powered business services to help the world’s best brands streamline their bu
Established in 2001, Firstsource Solutions Limited, an RP-Sanjiv Goenka Group company, is a specialized BPS partner with hyper-focused, domain-centered teams and cutting-edge tech, data, and analytics. We provide transformational solutions and services to clients in healthcare, banking and financ

We are one of the world's largest global providers of customer relationship management and business transformation outsourcing (CRM/BTO) services and industry leaders in Latin America. Our offerings have expanded beyond the realms of traditional Business Process Outsourcing (BPO) to become front-ru
Singapore-headquartered TDCX provides transformative digital CX solutions, enabling world-leading and disruptive brands to acquire new customers, to build customer loyalty, and to protect their online communities. TDCX helps clients achieve their customer experience aspirations by harnessing techn

Offering flexible solutions for all of the UAE’s staffing needs since 2001, Transguard Group is the region’s most trusted expert in security, facilities management, cash services and white-collar staffing, and more. With an annual turnover of AED 2.7 billion in FY23/24, Transguard’s expertise is in

Office Manager Ltd provides outsourcing services to SMEs in a number of areas. We manage Payroll & HR, Bookkeeping and Health and Safety requirements for small businesses. We also offer a Business Advisory service - if you feel your business could be performing better, or if you are just starting

Expert de la relation client depuis 1996, b2s est le N°1 de l’externalisation de votre relation client en qualité délivrée. Les 4 500 conseillers b2s, répartis sur 10 centres de relation clients, échangent avec vos clients chaque jour pour créer de la valeur à chaque contact, quelque soit le can

VXI Global Solutions is a BPO leader in customer service, customer experience, and digital solutions. Founded in 1998, the company has 40,000 employees in more than 42 locations in North America, Asia, Europe, and the Caribbean. We deliver omni-channel and multilingual support, software development,

At iQor, our 40,000 amazing employees spanning 10 countries are passionate about delivering an outstanding omnichannel customer experience for brands across the globe. Harnessing intelligent CX technology that can scale teams anywhere, our BPO solutions create happy employees and delighted customers
.png)
AI Telecom Stock IQSTEL (IQST) Reports Record Q3 2025 Results: $102.8 Million Quarterly Revenue. Vancouver, Kelowna, and Delta,...
On Sept. 17, the Fed in its FOMC meeting decided on a much-hyped 25-basis-point cut in the benchmark lending rate to reduce it to the range...
An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record.
Attacks on call centers lead to hundreds of millions of dollars in crypto thefts and disrupt retail sales.
Bengaluru: Two India-based employees of U.S. business process outsourcing firm TaskUs have been accused of unlawfully accessing sensitive...
We round up the week's key cybersecurity news. Alleged mastermind of kidnappings targeting crypto millionaires arrested in Morocco.
Coinbase was targeted by a sophisticated attack in January 2025. Hackers bribed employees of TaskUs, a Texas-based firm providing customer support for Coinbase.
EmbedEdit. Error Retrieving Episode / Episode Does Not Exist. Placeholder. Meta and Yandex are de-anonymizing Android users' web browsing...
Cryptocurrency giant Coinbase has been linked to a massive customer data breach that originated in India, and the damage could cost up to...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of TaskUs is https://www.taskus.com/.
According to Rankiteo, TaskUs’s AI-generated cybersecurity score is 628, reflecting their Poor security posture.
According to Rankiteo, TaskUs currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, TaskUs is not certified under SOC 2 Type 1.
According to Rankiteo, TaskUs does not hold a SOC 2 Type 2 certification.
According to Rankiteo, TaskUs is not listed as GDPR compliant.
According to Rankiteo, TaskUs does not currently maintain PCI DSS compliance.
According to Rankiteo, TaskUs is not compliant with HIPAA regulations.
According to Rankiteo,TaskUs is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
TaskUs operates primarily in the Outsourcing and Offshoring Consulting industry.
TaskUs employs approximately 36,825 people worldwide.
TaskUs presently has no subsidiaries across any sectors.
TaskUs’s official LinkedIn profile has approximately 405,961 followers.
TaskUs is classified under the NAICS code 541615, which corresponds to Others.
Yes, TaskUs has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/taskus.
Yes, TaskUs maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/taskus.
As of November 29, 2025, Rankiteo reports that TaskUs has experienced 1 cybersecurity incidents.
TaskUs has an estimated 1,040 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Total Financial Loss: The total financial loss from these incidents is estimated to be $400 million.
Detection and Response: The company detects and responds to cybersecurity incidents through an incident response plan activated with yes (coinbase), and law enforcement notified with yes (coinbase notified regulators), and containment measures with termination of bribed employees (~300 in january 2025), containment measures with ended partnership with taskus, and remediation measures with tightened vendor and insider controls (coinbase), remediation measures with $20 million reward for information leading to arrests, and recovery measures with reimbursement of affected coinbase customers, and communication strategy with public disclosure in may 2025 (coinbase), communication strategy with no prior disclosure by taskus (alleged concealment)..
Title: Systemic Security Failures and Data Breach at TaskUs Affecting Coinbase Customer Data
Description: Amendments to a class action in New York against TaskUs reveal systemic security failures and concealment in a breach tied to Coinbase customer data. The breach originated in late 2024, involving a criminal bribery scheme at TaskUs's India operations, where employees were allegedly bribed to photograph sensitive Coinbase customer account information and pass it to criminals. The breach affected less than 1% of Coinbase's monthly transacting users, with estimated losses up to $400 million. TaskUs allegedly concealed the breach's scope, fired HR personnel investigating it, and proceeded with a $1.6 billion buyout before Coinbase disclosed the incident in May 2025. Coinbase reimbursed affected users and ended its relationship with TaskUs, offering a $20 million reward for information leading to arrests.
Date Publicly Disclosed: 2025-05
Type: Data Breach
Attack Vector: Insider Threat (Bribed Employees)Social EngineeringPhysical Data Theft (Photographing Sensitive Information)
Vulnerability Exploited: Weak Insider ControlsLack of Vendor OversightInadequate HR and Compliance Monitoring
Threat Actor: Organized Criminal GroupBribed TaskUs Employees (India Operations)
Motivation: Financial Gain (Data Theft for Fraud/Resale)
Common Attack Types: The most common types of attacks the company has faced is Breach.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Bribed TaskUs Employees (India Operations).

Financial Loss: $400 million (estimated total loss)
Data Compromised: Coinbase customer account information, Personally identifiable information (pii)
Operational Impact: Termination of 300+ TaskUs EmployeesEnd of Coinbase-TaskUs PartnershipHR Personnel Fired During Investigation
Customer Complaints: Class Action Lawsuit Filed (Southern District of New York)
Brand Reputation Impact: Negative Publicity for TaskUs and CoinbaseAllegations of Concealment and Non-DisclosureLoss of Trust in Outsourcing Security
Legal Liabilities: Class Action LawsuitPotential Regulatory Violations for Non-Disclosure
Identity Theft Risk: High (Sensitive Account Information Compromised)
Average Financial Loss: The average financial loss per incident is $400.00 million.
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Customer Account Information, Sensitive Account Details (Photographed) and .

Entity Name: Coinbase
Entity Type: Cryptocurrency Exchange
Industry: Financial Services (Crypto)
Location: United States
Customers Affected: Less than 1% of monthly transacting users

Entity Name: TaskUs
Entity Type: Outsourcing Firm
Industry: Business Process Outsourcing (BPO)
Location: United States (HQ)India (Operations Center)

Incident Response Plan Activated: Yes (Coinbase)
Law Enforcement Notified: Yes (Coinbase notified regulators)
Containment Measures: Termination of Bribed Employees (~300 in January 2025)Ended Partnership with TaskUs
Remediation Measures: Tightened Vendor and Insider Controls (Coinbase)$20 Million Reward for Information Leading to Arrests
Recovery Measures: Reimbursement of Affected Coinbase Customers
Communication Strategy: Public Disclosure in May 2025 (Coinbase)No Prior Disclosure by TaskUs (Alleged Concealment)
Incident Response Plan: The company's incident response plan is described as Yes (Coinbase).

Type of Data Compromised: Customer account information, Sensitive account details (photographed)
Sensitivity of Data: High (PII, Account Access Details)
Data Exfiltration: Yes (Physical Theft via Photographs, Shared with Criminals)
Personally Identifiable Information: Yes
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Tightened Vendor and Insider Controls (Coinbase), $20 Million Reward for Information Leading to Arrests, .
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by termination of bribed employees (~300 in january 2025), ended partnership with taskus and .

Ransom Paid: No (Coinbase refused to pay criminals)
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Reimbursement of Affected Coinbase Customers, .

Regulations Violated: Potential Non-Compliance with Data Breach Disclosure Laws, Misrepresentation in SEC Filings (Form 10-K),
Legal Actions: Class Action Lawsuit (Southern District of New York), Potential Regulatory Investigations,
Regulatory Notifications: Coinbase Notified Regulators Immediately (Timing Unspecified)TaskUs Allegedly Misled Regulators (Claimed No Material Breach)
Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Class Action Lawsuit (Southern District of New York), Potential Regulatory Investigations, .

Source: Decrypt

Source: Reuters

Source: Amended Class Action Complaint (Southern District of New York)
Date Accessed: 2025 (Filed on Tuesday, exact date unspecified)
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Decrypt, and Source: Reuters, and Source: Amended Class Action Complaint (Southern District of New York)Date Accessed: 2025 (Filed on Tuesday, exact date unspecified).

Investigation Status: Ongoing (Class Action Lawsuit, Potential Regulatory Probes)
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public Disclosure In May 2025 (Coinbase) and No Prior Disclosure By Taskus (Alleged Concealment).

Customer Advisories: Coinbase Notified Affected UsersReimbursement Provided
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Coinbase Notified Affected Users, Reimbursement Provided and .

Entry Point: Bribed TaskUs Employees (India Operations)
Reconnaissance Period: Late 2024 to Early 2025
High Value Targets: Coinbase Customer Account Data
Data Sold on Dark Web: Coinbase Customer Account Data

Root Causes: Inadequate Vendor Security Oversight (Coinbase), Insider Threat Vulnerabilities (Taskus), Failure In Hr And Compliance Monitoring (Taskus), Concealment Of Breach Scope (Taskus),
Corrective Actions: Coinbase: Ended Taskus Partnership, Tightened Controls, $20M Reward For Arrests, Taskus: Terminated ~300 Employees (Allegedly Involved),
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Coinbase: Ended Taskus Partnership, Tightened Controls, $20M Reward For Arrests, Taskus: Terminated ~300 Employees (Allegedly Involved), .
Ransom Payment History: The company has Paid ransoms in the past.
Last Attacking Group: The attacking group in the last incident was an Organized Criminal GroupBribed TaskUs Employees (India Operations).
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2025-05.
Highest Financial Loss: The highest financial loss from an incident was $400 million (estimated total loss).
Most Significant Data Compromised: The most significant data compromised in an incident were Coinbase Customer Account Information, Personally Identifiable Information (PII) and .
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Termination of Bribed Employees (~300 in January 2025)Ended Partnership with TaskUs.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Personally Identifiable Information (PII) and Coinbase Customer Account Information.
Highest Ransom Paid: The highest ransom paid in a ransomware incident was No (Coinbase refused to pay criminals).
Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Class Action Lawsuit (Southern District of New York), Potential Regulatory Investigations, .
Most Recent Source: The most recent source of information about an incident are Amended Class Action Complaint (Southern District of New York), Reuters and Decrypt.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing (Class Action Lawsuit, Potential Regulatory Probes).
Most Recent Customer Advisory: The most recent customer advisory issued was an Coinbase Notified Affected UsersReimbursement Provided.
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Bribed TaskUs Employees (India Operations).
Most Recent Reconnaissance Period: The most recent reconnaissance period for an incident was Late 2024 to Early 2025.
.png)
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.
Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.
Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.
File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.