Coinbase was reportedly aware as early as January of a significant data breach at an outsourcing company that handled customer support for the cryptocurrency exchange, according to a report by Reuters.

An employee from the India-based firm, TaskUs, was caught taking photos of customer data on her work computer using her personal phone. Multiple sources, including former TaskUs employees, reportedly confirmed that Coinbase had been notified immediately after the incident was discovered in the Indian city of Indore.

This story is an excerpt from the Unchained Daily newsletter.

Coinbase disclosed the breach only last month in a filing to the U.S. Securities and Exchange Commission, and said in a blog post that it had refused to pay a $20 million ransom requested by cybercriminals in an extortion attempt.

More than 200 TaskUs employees were terminated in a mass layoff following the breach, which drew attention in Indian media.