The Cryptocurrency Post The CryptocurrencyPost
AboutContact
Security

Coinbase says vendor incident exposed some customer contact data

Photorealistic data console with a red breach glow signaling third-party vendor data exposure in crypto

Coinbase said a security incident at analytics provider Amplitude exposed contact information belonging to a small subset of its customers, while adding that there was no evidence of unauthorized access to Coinbase systems and no impact to customer funds. The company posted the update on its official support account.

The disclosure points to third-party risk rather than a breach of Coinbase’s own infrastructure. In its statement, the exchange said the incident affected other Amplitude customers as well and that it is notifying impacted users and regulatory agencies as required.

Coinbase did not identify the other businesses affected, explain how the exposure occurred or name an attacker. The company also did not say that passwords, private keys or transaction records were exposed.

What Coinbase has and has not confirmed

The public update leaves the scope of the incident narrow, at least based on what Coinbase has confirmed so far. The company said the exposure involved contact data for a limited group of customers, but it did not provide a broader technical breakdown of the event.

That distinction matters because the incident sits outside Coinbase’s own systems, even as it still affects customer data handled through a vendor. Coinbase also has not linked the exposure to the separate data theft it disclosed earlier in the year.

Reporting around the incident has included an unverified estimate that more than 70,000 users may have been affected, but Coinbase has not confirmed that figure.