Coinbase Customer Data Exposed in Third-Party Analytics Breach as Exchange Confirms Funds Remain Secure

Coinbase has confirmed that customer contact information and limited transaction data were exposed following a cybersecurity incident involving third-party analytics provider Amplitude. The cryptocy exchange says the incident affected a small portion of its customers but found no evidence that hackers accessed Coinbase’s internal systems or compromised customer funds. Although the company has not disclosed the number of affected users, it is notifying customers and regulators as concerns grow over the security of personal information shared with outside technology providers.

Coinbase Confirms Customer Data Exposure Through Amplitude

The incident became public on October 27, when Coinbase addressed reports suggesting the exchange had suffered another major cybersecurity breach.

According to Coinbase, the unauthorized access occurred at Amplitude, a company providing analytics services used to understand customer behavior and improve digital products.

The exchange emphasized that the breach originated outside its own infrastructure.

Coinbase said the incident involved a limited portion of customer information held by the analytics provider, rather than unauthorized access to its cryptocy trading platform.

The company is contacting affected customers directly and notifying regulatory authorities in accordance with applicable requirements.

Contact Information and Limited Transaction Data Compromised

Coinbase initially described the exposure as involving customer contact information.

In a subsequent statement, a company spokesperson confirmed that limited transaction data was also affected.

The exchange provided several important details about the incident:

• Customer contact information was exposed through Amplitude’s systems.

• Limited transaction data was also involved.

• Home addresses were not exposed, according to Coinbase.

• No information allowing direct account access was compromised, according to the company.

• Customer cryptocy funds were not affected.

Coinbase has not publicly identified the precise contact-data fields involved or disclosed how many customers were impacted.

The company also has not confirmed when the underlying Amplitude incident occurred.

Although customer assets reportedly remain secure, exposed contact information could still be used in targeted phishing campaigns or attempts to impersonate Coinbase representatives.

Coinbase Disputes Claims That 70,000 Customers Were Affected

Following the disclosure, social media posts circulated claims that information belonging to more than 70,000 Coinbase customers had been compromised.

However, Coinbase disputed those reports.

A company spokesperson described the figure as false and reiterated that the incident affected only a small subset of customers.

The exchange has not provided an alternative confirmed number.

The unverified figure may have been confused with an earlier Coinbase data breach disclosed in 2025, which affected approximately 69,461 customers.

There is currently no verified evidence that 70,000 customers were affected by the October 2026 Amplitude incident.

Coinbase Previously Suffered Major Customer Data Breach in 2025

The latest incident comes approximately 17 months after Coinbase disclosed a separate cybersecurity breach involving compromised customer support personnel.

In May 2025, the company revealed that criminals had bribed overseas support agents to obtain sensitive customer information.

That incident exposed records belonging to approximately 69,461 customers, including names, addresses, identification information and other account-related details.

The attackers subsequently demanded a $20 million ransom.

Coinbase refused to pay and instead announced a reward of up to $20 million for information leading to the identification and prosecution of those responsible.

The exchange estimated that remediation and customer reimbursement expenses associated with the 2025 incident could reach $180 million to $400 million.

Unlike the earlier breach, the October 2026 incident has not been linked to compromised Coinbase employees or unauthorized access to the exchange’s internal systems.

The two incidents are separate.

Third-Party Technology Providers Create New Security Risks

The Amplitude incident highlights a growing challenge facing cryptocy exchanges and other financial institutions.

Companies frequently rely on outside vendors for customer analytics, communications, cloud infrastructure and payment processing.

Although those partnerships can improve services, they also create additional locations where customer information may be stored or processed.

A security breach involving a vendor can expose sensitive data even when the financial institution’s own infrastructure remains protected.

Similar concerns have emerged across the cryptocy industry.

Earlier this month, Bithumb disclosed a breach involving its internal workplace communication system, while hardware wallet manufacturer Keystone reported the exposure of customer purchase records following a compromise of its website infrastructure.

These incidents demonstrate that cryptocy security extends beyond protecting private keys and digital assets.

Coinbase Customers Warned About Phishing and Impersonation

Although Coinbase says no customer funds were directly compromised, individuals whose contact information was exposed may face increased risks from social engineering.

Attackers can use legitimate customer details to make fraudulent communications appear more convincing.

Potential scams include fake Coinbase security alerts, fraudulent account verification requests and messages claiming that funds must be transferred to a new wallet.

Customers should take several precautions:

• Verify account notifications through the official Coinbase application or website.

• Never share passwords, recovery phrases or authentication codes with anyone claiming to provide support.

• Avoid transferring cryptocy in response to unsolicited security messages.

• Use strong multifactor authentication, preferably a security key or authenticator application.

• Review account activity for unfamiliar transactions or login attempts.

Coinbase is notifying affected users directly, so customers should avoid relying on unsolicited messages claiming to offer compensation or breach-related assistance.

Crypto Industry Faces Growing Pressure to Protect Customer Data

The latest Coinbase incident adds to growing concerns about the security of personal information across cryptocy platforms.

As exchanges expand their services and integrate with traditional financial infrastructure, they increasingly depend on outside technology providers.

That makes vendor oversight, data minimization and access controls important components of cybersecurity.

Financial institutions must protect customer assets while also ensuring that third-party partners handle personal information responsibly.

For Coinbase, the immediate concern is limiting the potential misuse of exposed customer information while determining the full scope of the Amplitude incident.

Coinbase Says Funds Are Safe but Data Privacy Concerns Remain

Coinbase maintains that its trading systems were not breached and that customer cryptocy holdings remain secure.

However, the exposure of contact information and limited transaction data demonstrates how security incidents involving outside vendors can still affect cryptocy users.

The exchange has not disclosed the number of impacted customers, leaving important questions about the incident’s scale unanswered.