Coinbase customer data exposed in Amplitude vendor breach
Coinbase says a security incident at analytics provider Amplitude hit contact data for a small subset of customers, with funds unaffected.

The facts
- According to Decrypt, Coinbase says a security incident at third-party analytics vendor Amplitude affected contact data for a "small subset" of its customers.
- Coinbase says it found no evidence of unauthorised access to its own systems and that customer funds were not impacted. It is notifying affected customers and regulators.
- Coinbase has not said how many customers were affected, what contact data was exposed, when it happened, or which other Amplitude customers were hit.
- Decrypt notes an earlier Coinbase incident, disclosed in May 2025, where bribed overseas support agents leaked data. A Maine attorney general filing put that at 69,461 customers.
Case notes · Danny's take
Why it matters
Coinbase says it wasn't breached. Its vendor was. For the customer whose details leaked, that is a distinction without much comfort. Your data sits with every company your exchange shares it with, and you never see that list. Contact details are enough to power convincing phishing, and in Lagos or anywhere else, a fake call that knows your name is how people lose real money. Funds safe today doesn't mean you're safe next month.
For traders
Treat any email, SMS or call that mentions your Coinbase account as hostile until you verify it inside the app. Watch for Coinbase or regulator filings that reveal how many people were affected and what data was exposed, because those details are still missing.
For builders
Your vendors are part of your attack surface. Audit what customer data you send to analytics tools, minimise it, and ask vendors how fast they would tell you about an incident.
Not financial advice. Do your own investigation.
This story was summarised with AI from Decrypt's reporting and checked against our editorial policy. Danny's take reflects his views. Disclaimer.
