Coinbase Cartel has surfaced sharply since first appearing on tracker in late May 2026, claiming 17 victims in the past 30 days out of 26 total, indicating an active and accelerating operation. Named victims span a wide mix of sectors, engineering and construction firms, private equity, standards bodies, and technology manufacturing, with no single vertical or geography dominating the claimed list, suggesting largely opportunistic targeting rather than a sector-specific campaign. No confirmed sector or country breakdown is available from current tracking data, and no MITRE ATT&CK technique set has been catalogued for this group at this time. Naming conventions in victim postings (repeated "NEW" tags with same-day clustering, four victims claimed on August 14 alone) point to a high publication cadence typical of double-extortion leak-site operators seeking rapid pressure. All victim identities and claims here are as asserted by the group on its leak site and remain unverified.