Coinbase Clarifies Data Leak Origin, Blames Third-Party Provider

Coinbase has responded to concerns about a potential data breach, clarifying that the incident did not stem from a flaw in their own infrastructure. The company announced that unauthorized access occurred through a third-party analytics service provider and that no unauthorized access was detected within Coinbase’s systems.

External Provider Under Scrutiny

In a statement on X (formerly Twitter), Coinbase Support declared, “Coinbase has not experienced a data breach.” The company identified the source of the security incident as their analytics provider, Amplitude, which impacted communication data for a limited subset of Coinbase customers.

Amplitude is recognized as an analytics platform that product teams use to assess user interactions. Coinbase emphasized that the breach did not target the exchange’s infrastructure but was linked to an incident involving a service provider.

Coinbase Support has stated no data breach occurred at Coinbase; the incident originated from Amplitude, the third-party analytics provider.

The company assured that clients’ assets remain unaffected and confirmed notifying impacted users and relevant regulatory authorities in accordance with legal obligations.

Fraud Alert Issued to Customers

There is a warning that exposed contact information could potentially be used in fraudulent support messages, phishing attempts, or social engineering tactics. Therefore, users are advised to be cautious about unsolicited messages claiming to address account security.

Customers should avoid clicking on suspicious links, refrain from sharing passwords or two-factor authentication codes, and access their accounts solely through official channels.

As discussions about the risks posed by third-party service providers in the crypto sector continue, this incident highlights the importance for exchanges to focus also on securing their supply chain outside of their directly managed systems. Coinbase’s current findings suggest the incident is limited to a specific group of customers.

New Listings and FORTH Suspension

Meanwhile, Coinbase has recently added Axis Robotics, Stable, and Ritual assets to its platform and mobile app, allowing users to trade, convert, send, receive, and store these assets.

Following regular evaluations, the exchange has made a decision regarding the Ampleforth Governance Token. Coinbase will suspend FORTH trading on November 23, 2026, at 2:00 PM Eastern Time. This suspension will affect Coinbase’s Simple and Advanced Trade services, Coinbase Exchange, and Coinbase Prime.