Overview
- Coinbase said on Wednesday that a security incident at analytics vendor Amplitude exposed contact information for a small subset of its customers and that its own systems were not breached.
- The company said customer funds were not affected and that it is emailing impacted users and reporting the incident to regulators as required by law.
- Security firm SlowMist circulated an unverified estimate that contact data for more than 70,000 Coinbase users may have been accessed, a figure Coinbase has not confirmed.
- Exposed emails and phone numbers can be used by criminals for phishing, SIM‑swap and social‑engineering attacks, so Coinbase urged users to treat unexpected messages or calls with extra caution.
- The case highlights recurring supply‑chain risk in crypto and finance and follows Coinbase’s May 2025 data incident, reinforcing calls for tighter vendor controls and faster disclosure of breach scope.