Coinbase Denies Data Breach as Amplitude Incident Exposes Customer Contact Details

Coinbase has denied a breach of its own systems after a security incident at analytics provider Amplitude exposed contact details belonging to a small subset of its customers.

In a post on X, Coinbase Support said it found no evidence of unauthorized access to its own systems and that customer funds were not affected. Amplitude’s other customers were also hit. Coinbase said it is notifying affected users and regulators as the law requires, but it did not say how many people were involved or which contact fields were exposed.

Conflicting Figures

The scale remains unclear. 23pds, SlowMist’s chief information security officer, said a leak involving Coinbase was real and that hackers had obtained contact information for more than 70,000 users. The report said it was not yet known whether hackers had taken passwords or funds.

Follow us on X for real-time crypto updates.

Why Contact Data Still Matters

Even without passwords, private keys or funds, stolen emails and phone numbers give scammers material for phishing, impersonation and SIM-swap attempts. The case also shows supply-chain risk, where users can be exposed through a third party even when a company’s own systems hold.

Other Leaks in Asia

Changpeng Zhao, the Binance founder, listed four data leaks reported on Wednesday. They were Coinbase’s alleged vendor exposure, a user data leak at South Korean exchange Bithumb, and leaks at Korean securities firms Mirae Asset and Daishin Securities.

Daishin said hackers stole the names, emails, and mobile numbers of 38,490 customers; Bithumb also reported a leak of personal information after an unauthorized external party accessed its internal mobile groupware system. South Korean regulators have begun inspecting the Mirae Asset breach.

CZ Shares Tips to Protect Crypto Accounts

• Use a separate email alias for each exchange, share only required details, and, if possible, use a dedicated phone number.
• Protect accounts with a unique password, hardware security keys or passkeys, and avoid SMS codes.
• Turn on withdrawal address whitelisting and anti-phishing codes where offered.
• Ask the mobile carrier for a port-out PIN against SIM swaps.
• Treat anyone contacting you about account security or refunds as a scammer, and do not click links in emails or texts.

The reported incidents highlight how third-party vendors can expose customer information even when financial accounts remain secure. While the full scope of the Coinbase incident remains unclear, affected users may face continued phishing and impersonation risks. Investigations into the reported leaks will help establish what data was accessed and whether additional protective measures are needed.

Subscribe to our YouTube channel for the latest crypto news.

Related: Coinbase Sets October 30 Deadline for 14 Stablecoins Under MiCA Rules