It seems like you did a great job collecting info and reporting it. Still, how do you know that the info was obtained via Coinbase? Certainly they are a likely vector but you are too, and maybe there are others.

Edit: Nevermind; I see you addressed that here:

https://news.ycombinator.com/item?id=45948808