Their blog post says they notified affected users yesterday:
https://www.coinbase.com/blog/protecting-our-customers-stand...
From the sounds of it, this is limited to US customers? Just going by the mention of social security number which does not exist in other countries like the UK.