Coinbase says Amplitude vendor incident exposed some customers' contact data
In brief
- Coinbase said an incident at analytics vendor Amplitude exposed some customers' contact information.
- Coinbase Support said on X that a "small subset" of customers was affected.
- Coinbase denied its own systems were breached and said customer funds weren't affected.
- Coinbase hadn't told Cointelegraph how many customers were affected as of publication.
What Coinbase said
The exposure hit a "small subset" of Coinbase customers along with other Amplitude clients, Coinbase Support said in a post on X. That's about as specific as the exchange got. Coinbase's description of the incident covers its own customers and, more broadly, other clients of the same analytics vendor, but it doesn't put a number on either group.
So how many people are affected? Coinbase hasn't said. Cointelegraph asked the exchange how many customers were affected and hadn't received a response by publication.
The incident impacted a “small subset” of Coinbase customers, along with other Amplitude clients, Coinbase Support said on X.
Coinbase says the problem sits with the vendor, not with its own infrastructure. The exchange said it found no evidence of unauthorized access to its own systems and denied that it had been breached.
Customer funds weren't affected, according to Coinbase.
Other breach reports the same day
Coinbase's disclosure landed alongside other reports that day of cyberattacks affecting both crypto exchanges and traditional financial firms. In South Korea, Bithumb was investigating whether a breach of its internal work platform exposed customer information, Cointelegraph reported. Brokerage Daishin Securities reported a leak of personal and credit information belonging to 38,490 customers (also per Cointelegraph's reporting).
Coinbase's earlier breach
It's not the first data incident Coinbase has disclosed. In May 2025, the exchange disclosed a separate data breach that affected less than 1% of its monthly transacting users, and it estimated reimbursement and remediation costs from that breach at up to $400 million.
That $400 million figure came from Coinbase's own disclosure at the time, and it's tied to the 2025 breach, not the Amplitude incident. For the vendor incident, the exchange's account so far has two parts: some customers' contact information was exposed, and Coinbase's own systems and customer funds weren't touched.
