Coinbase says a breach at analytics vendor Amplitude exposed some customers' contact data, not its own systems or funds

Summary

Coinbase said a security incident at Amplitude, a third-party analytics provider, exposed contact data belonging to a "small subset" of its customers along with data of other Amplitude clients, according to CoinDesk, Decrypt and Cointelegraph.

"Coinbase has not had a data breach," the company's support account said on X, adding that it found no evidence of unauthorized access to its own systems and that customer funds were not impacted, Decrypt reported.

Coinbase said it is notifying affected customers, and regulators, as the law requires, but did not say how many people were affected, which contact fields were exposed or when the incident happened, Decrypt and CoinDesk said.

CoinDesk noted that exposed email addresses and phone numbers can still be used for phishing and social-engineering attempts even though passwords, keys and funds were not compromised.

Key facts

• Cointelegraph said it asked Coinbase how many customers were affected and had not received a response by publication. (Cointelegraph)
• In May 2025, Coinbase disclosed a separate breach in which criminals bribed overseas support agents to steal data of less than 1% of monthly transacting users; a later Maine filing put the count at 69,461, Decrypt reported. (Decrypt)
• Coinbase estimated reimbursement and remediation costs from the 2025 incident at up to $400 million, Cointelegraph said. (Cointelegraph)
• The disclosure came the same day South Korean exchange Bithumb and brokerage Daishin Securities reported their own data leaks, CoinDesk and Cointelegraph noted. (CoinDesk)