Instead of paying the $20 million ransom, Coinbase offered the same amount of money for information leading to the attackers.

Coinbase Global said Thursday that it has refused to pay a $20 million ransom demand from cybercriminals who bribed the company’s overseas customer support agents to steal sensitive user data.The cryptocurrency exchange estimated that the incident could cost from $180 million to $400 million,

Coinbase said customer passwords and private keys were protected by its systems, and “at no time were any of the targeted contractors or employees able to access customer funds.”