Key Takeaways
- Coinbase attributes the exposure of some customer contact information to a security incident at analytics provider Amplitude.
- The exchange says it found no evidence of unauthorized access to its own systems or impact on customer funds.
- Coinbase has not disclosed how many customers were affected or exactly which contact details were exposed.
- Claims that more than 70,000 users were affected remain unconfirmed by the company.
Coinbase has said a security incident at third-party analytics provider Amplitude exposed a small subset of its customers’ contact information, while stating that its own systems were not breached. The cryptocurrency exchange said customer funds were not affected and that it had found no evidence of unauthorized access to its systems.
The disclosure follows online reports about a possible Coinbase data breach. In its response, the company distinguished the Amplitude incident from a breach of its own infrastructure. It also said it was notifying affected customers and relevant regulatory agencies in line with its legal obligations.
The full extent of the exposure remains unclear. Coinbase has not publicly confirmed the number of customers involved, provided a detailed list of the information exposed, or explained when the incident at Amplitude occurred. The available information therefore does not establish how many Coinbase users were affected or whether the exposed details have been misused.
Coinbase Attributes Customer Data Exposure to Amplitude Incident
Coinbase addressed the reports in a statement published by its support account on X. The company said it had not experienced a breach of its own systems and attributed the exposure to a security incident involving Amplitude, an external analytics provider.
Coinbase said the incident affected a small subset of customer contact data, alongside information associated with other Amplitude customers. The exchange added that it had found no evidence of unauthorized access to its systems and that customer funds were unaffected.
The company has not provided a confirmed customer count or a full breakdown of the exposed contact information. It said it was contacting affected customers and regulatory agencies in accordance with its legal obligations. Amplitude provides analytics services that businesses use to understand how people interact with digital products.
The incident highlights a potential risk associated with external service providers: information handled by a third party can be exposed even when a company reports no unauthorized access to its own systems.
Exposed Contact Details Could Increase Phishing Risks
Even though Coinbase says customer funds were safe, the exposure of contact details could still cause problems for users. Scammers could use an email address or phone number to send fake security alerts or pose as Coinbase support. There is no public evidence that the Amplitude incident led to stolen funds or hacked accounts, and Coinbase has not reported any such cases linked to the exposure.
Past user discussions illustrate how phishing attempts can target exchange customers. In a discussion on Reddit, one user described receiving messages requesting two-factor authentication information alongside suspicious account activity. That account is a separate case and does not establish any connection to the Amplitude incident.
Coinbase’s existing security guidance warns customers not to share passwords or two-factor authentication codes and not to transfer funds because of unsolicited instructions. Users should also be cautious with unexpected links and verify support requests through official channels.
The company’s support account on X is an official source for updates, but customers should still avoid sharing private account details in public replies or direct messages.
The distinction between a third-party incident and a breach of Coinbase’s own systems remains central to the company’s account. While Coinbase says it found no evidence of unauthorized access to its infrastructure and no impact on customer funds, the privacy implications for affected users will depend on what information was exposed and whether it is subsequently misused.
