Coinbase Denies Systems Breach, Cites Amplitude Contact-Data Incident

Coinbase said late Tuesday that a security incident at analytics vendor Amplitude affected “a small subset of Coinbase customer contact data,” but that it had found no evidence of unauthorized access to the crypto exchange’s own systems.

“Coinbase has not had a data breach,” its verified support account wrote in an Oct. 27 statement on X. Customer funds were not affected, it said.

Coinbase said it was notifying impacted customers and regulatory agencies in accordance with its legal obligations. The company said other Amplitude customers were also affected by the vendor’s security incident.

The statement identified the affected information only as “customer contact data.” It did not specify the data fields involved, how many customers were affected, when the incident occurred or how long it lasted.

Contact Data and Impersonation Scams

The disclosure follows a separate Coinbase breach revealed in May 2025, when the company said criminals bribed overseas support agents to copy customer records.

That earlier incident involved names, addresses, phone numbers and email addresses, as well as government-ID images, balance snapshots and transaction histories, according to Coinbase’s May disclosure. Coinbase said the attackers’ aim was to use the customer list to impersonate the exchange and trick people into handing over crypto.

Coinbase’s guidance in that disclosure warned that it would never ask customers for passwords or two-factor authentication codes, or tell them to move funds to a “safe” wallet.