The original disclosure never claimed that emails were leaked. They were found somewhere else: http://blog.shubh.am/full-disclosure-coinbase-security/#poc http:

The original disclosure never claimed that emails were leaked. They were found somewhere else: http://blog.shubh.am/full-disclosure-coinbase-security/#poc http://blog.shubh.am/full-disclosure-coinbase-security/#poc Their official response confirms this: http://blog.coinbase.com/post/81407694500/update-on-coinbase-data-security http://blog.coinbase.com/post/81407694500/update-on-coinbase...