Cybersecurity

Some Coinbase customers' contact data exposed through analytics vendor Amplitude

2 min read

Risograph-style illustration of a padlocked block that stays sealed beside an analytics bar chart, with small email and phone icons drifting away from the chart, for contact data exposed through Coinbase's analytics vendor Amplitude.

Coinbase says a security incident at analytics vendor Amplitude exposed contact data for a small subset of its customers, and that its own systems and customer funds were not affected.

In brief

Drafted with AI assistance and reviewed by the editor. Developing.

"Coinbase has not had a data breach," Coinbase Support posted on X on 28 October. The post said Amplitude, an analytics vendor, "experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers."

What Coinbase says

According to the same post, Coinbase found "no evidence of unauthorized access to Coinbase systems", and customer funds were not affected. It said it is notifying affected customers and regulatory agencies in line with its legal obligations.

CoinDesk reported that Coinbase did not say how many customers were affected or which contact-data fields were involved. Cointelegraph said it had asked Coinbase for the number of affected customers but had not had a reply by publication. We could not find a public statement from Amplitude about the incident.

The 70,000 figure

The claim that more than 70,000 users were affected comes from 23pds, chief information security officer at the blockchain security firm SlowMist. In an X post written before Coinbase's statement, he repeated another account's claim that hackers had obtained contact information for more than 70,000 users. Coinbase has not confirmed that number.

Context

This is separate from the breach Coinbase disclosed in May 2025. Cointelegraph reports that the earlier breach affected less than 1% of monthly transacting users, and that Coinbase estimated reimbursement and remediation costs at up to $400 million.

What customers should do

CoinDesk notes that exposed email addresses and phone numbers can be used for phishing and social engineering, even when passwords and funds are untouched. Coinbase customers should:

  • treat unexpected calls, texts and emails that claim to be from Coinbase as suspicious, and contact support only through the app or the official website;
  • never share passwords, two-factor codes or recovery phrases, and never move funds to a "safe" wallet at anyone's request;
  • use an authenticator app or security key rather than SMS for two-step sign-in where possible.

Sources and scope

The reader guidance is ByteNib editorial analysis and advice. The 70,000 figure is unverified and attributed to its source.

Drafted with AI assistance and reviewed by the editor before publication.

Continue exploring: Cybersecurity analysis, the related implementation tutorial, and the structured learning path.