Coinbase Says Vendor Amplitude Exposed Some Customer Contact Data

Coinbase said late Tuesday that a security incident at Amplitude, an analytics vendor it uses, exposed contact data for "a small subset" of its customers. The exchange posted the statement on its Coinbase Support account on X at 10:49 p.m. ET.

"Coinbase has not had a data breach," the company wrote. It said it found no evidence of unauthorized access to its own systems, that customer funds were not affected, and that it is notifying affected customers and regulators as the law requires.

What we know and don't

Coinbase hasn't said how many customers were affected or which contact fields were exposed, such as email addresses or phone numbers. Posts on X claiming more than 70,000 users were hit have not been confirmed by Coinbase or Amplitude. Coinbase said other Amplitude clients were also affected. We found no public statement from Amplitude as of publication.

The Defiant reported the same account of the incident, citing Coinbase's statement.

Why contact data still matters

Leaked emails and phone numbers are the raw material for phishing. Anyone who knows you hold a Coinbase account can pose as its support team, so an unexpected call or text claiming to be Coinbase deserves a check through the official app before any reply.

The open question is how many accounts are in Amplitude's "small subset," and whether Amplitude will say so itself.