Coinbase says Amplitude vendor incident exposed some customer contact data, funds not affected
The exchange denies a breach of its own systems but has not said how many customers or which contact fields were hit.
TL;DR
- Coinbase said a security incident at analytics vendor Amplitude affected contact data of a "small subset" of its customers, along with other Amplitude clients.
- Coinbase said it found no evidence of unauthorized access to its own systems and that customer funds were not impacted.
- The exchange is notifying affected customers and regulators; it has not disclosed the number of affected users, the exposed fields or the incident date.
- CoinDesk warns exposed email addresses and phone numbers can be used for phishing and social-engineering attempts.
Coinbase is pushing back on hack reports. In a post from its support account on X, dated Oct. 28, 2026, the exchange said: "Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers."
What Coinbase says
- Source of the incident: Amplitude, a third-party analytics provider, per CoinDesk and Decrypt.
- Own systems: Coinbase said it found no evidence of unauthorized access to its systems.
- Funds: customer funds were "not impacted," Decrypt reports.
- Notifications: affected customers are being informed by email, and regulators are being notified in line with legal obligations.
What is still unknown
Coinbase did not say how many customers were affected, which contact fields were exposed or when the incident took place, according to Decrypt. Cointelegraph said it asked Coinbase for the number of affected customers and had not received a response by publication.
CoinDesk notes that even without passwords, private keys or funds being compromised, exposed email addresses and phone numbers "can still serve as valuable raw material for phishing and social-engineering attacks."
Context
In May 2025, Coinbase disclosed a separate incident in which bribed overseas support agents stole personal data of less than 1% of its monthly transacting users. A later filing with the Maine attorney general put the number of affected customers at 69,461, Decrypt reports, and Coinbase estimated reimbursement and remediation costs at up to $400 million, per Cointelegraph. Separately, Korean brokerage Daishin Securities said personal information of 38,490 customers was hacked, CoinDesk reports.
What it means for Web3 teams – Analysis
Vendor risk is user risk. Analytics, support and shipping providers often hold the contact data attackers need for convincing phishing. Teams should map which third parties receive user emails and phone numbers, minimise what is shared, and prepare clear warnings for users when a vendor incident hits. This is not investment advice.
FAQ
Was Coinbase hacked?
Coinbase says no. It said a security incident at analytics vendor Amplitude affected a small subset of Coinbase customer contact data and that it found no evidence of unauthorized access to its own systems.
Were customer funds affected?
Coinbase said customer funds were not impacted.
How many customers were affected?
Coinbase has not disclosed the number of affected customers, the exposed contact fields or the date of the incident.
What risk do affected users face?
CoinDesk notes exposed email addresses and phone numbers can be used for phishing and social-engineering attempts.
Sources
News summary based on the sources above. Not investment, legal or tax advice. Editorial policy & corrections · Report an error
Building in Web3? Turn the news into trust.
Positioning, KOL programs, LinkedIn systems and claim-safe content for Web3 and fintech teams.
Related
Polymarket halts trading after $2.65 million exploit via compromised third-party script, pledges full refunds
A wallet-draining script served through website-monitoring provider DebugBear hit Polymarket.com on Oct. 29, 2026. Trading resumed within about an hour; the company says all affected traders will be reimbursed.
Binance hit by $6.3 billion hack, the largest on record; about $3 billion frozen
Binance says a compromised DevOps engineer's laptop may have let an attacker submit unauthorized withdrawals. TRM Labs and Chainalysis link the theft to North Korea's TraderTraitor; Binance pledges to cover all losses.
NYSE owner ICE teams with Trade[XYZ] to bring Hyperliquid-based perpetual futures to the U.S.
Intercontinental Exchange announced on Oct. 29, 2026 a definitive agreement to run a regulated U.S. market for Trade[XYZ]'s perpetual contracts, subject to regulatory approvals. ICE is also investing in the company.