Coinbase Says Customer Data Leaked Through Amplitude
Coinbase says only contact details for a small group of customers were exposed through Amplitude. The exchange sees no breach in its own systems, but is warning about phishing.
Key Takeaways
- Coinbase says customer funds are safe after an incident at Amplitude exposed contact details for a small group of customers.
- According to Coinbase, its own systems were not accessed without permission, and no direct breach at the company was found.
- Leaked email addresses and phone numbers can be used for phishing and social engineering, even though passwords and balances were not affected.
Coinbase says customer funds are safe after an incident at analytics company Amplitude exposed contact details for a small group of customers. The crypto exchange said its own systems were not accessed without permission and that no direct breach at Coinbase itself was found.
Incident at Vendor
According to Coinbase, the leak did not come from its own infrastructure, but from an attack or data breach at an external service provider. It involves a small portion of customer contact details, along with data from other Amplitude customers. Coinbase Support said affected users are being notified by email, as required by law.
The company did not say exactly how many customers were affected, and it also did not say which data fields were exposed. That means it is still unclear how big the impact is for each user.
Risk of Phishing
Although the funds are safe according to Coinbase, leaked email addresses and phone numbers can still be used for phishing and social engineering. That makes incidents like this relevant for customers, even if passwords, private keys, and balances were not affected. That risk was also seen earlier with phishing emails around a hardware wallet, where leaked or misused contact details were used to trick users.
Broader Risk for the Sector
The incident shows how vulnerable crypto companies can be to problems at vendors. In 2026, nearly half of data breaches involved third parties, and incidents like these can also hurt a company’s reputation, even when its own systems were not hit. For European crypto users, that matters because many platforms are becoming more dependent on outside parties for analytics, communication, and other services.
