- Coinbase denied reports that it was hacked, saying customer funds are safe and the incident originated at Amplitude, a third-party analytics provider. The exposed data includes only a “small subset” of contact information, along with data related to other Amplitude clients, Coinbase Support said on X.
- The exchange is notifying affected customers by email as required by law and said its systems have not detected any unauthorized access. Coinbase did not say how many customers were affected or exactly which contact-data fields were involved.
- The incident highlights supply-chain risk, where customers can be exposed through vendors even when a company’s core infrastructure is secure. Exposed email addresses and phone numbers can still fuel phishing and social-engineering attacks, even if passwords, private keys and funds were not compromised.
- It comes amid a wave of data breaches at financial firms in South Korea. Daishin Securities said personal information of 38,490 customers was hacked, Bithumb customer data was leaked in a cyberattack, and authorities began inspecting a breach at Mirae Asset Global Investments.
What Happened?
Nasdaq-listed Coinbase said the data exposure stemmed from Amplitude, a third-party analytics provider, and that data related to other Amplitude clients was also involved. Coinbase Support said on X that only a small subset of contact information was exposed and that the company had not seen unauthorized access to its own systems. The exchange said it is emailing affected customers as the law requires. CoinDesk said it had asked Coinbase for further comment.
Why It Matters?
For a crypto platform, trust in custody is the core of the business, so drawing a clear line between a vendor’s breach and the exchange’s own security is important for customer confidence. Contact details are still valuable to scammers, who often impersonate exchange support staff to trick users into handing over credentials or moving funds. The episode also shows how widely shared analytics tools can become a single point of failure across many companies at once.
What’s Next?
Key details remain unresolved, including the number of affected users and the data fields involved, which Coinbase or Amplitude may need to disclose. Customers should expect more targeted phishing attempts and be wary of unsolicited messages claiming to come from Coinbase. Investors will watch for any further disclosures and whether the incident has any lasting effect on user activity.
Affected Tickers and Coins: COIN, AMPL, BTC
Source: CoinDesk
