Coinbase: No breach, third-party vendor exposed user data

Coinbase says its systems were not breached after Amplitude exposed contact data of 70,000+ users. No passwords or funds were compromised. Users are being notified and warned about phishing.

Coinbase has confirmed that its own systems were not compromised following a security incident involving Amplitude, a third-party analytics provider. The breach at Amplitude resulted in the exposure of contact information—including names, emails, and phone numbers—of over 70,000 Coinbase users. Importantly, no passwords or financial data were affected. Coinbase emphasized that customer funds remain secure and there is no evidence of unauthorized access to its internal infrastructure. The company is notifying affected users and regulators as required by law, and is collaborating with Amplitude to investigate the incident and strengthen future security measures. Users are urged to remain vigilant against phishing attempts that may arise from the leaked contact details. This incident underscores the critical importance of robust third-party vendor security management, even when a company’s own systems are secure.

Related News