So they looked into it and eventually determined the root cause and then took action.

I don't know why you think acknowledgement of your report is concrete evidence that coinbase knew about their breach months before it was disclosed.