Coinbase says contact details for some of its customers were exposed in a security incident at Amplitude, a third-party analytics company it uses.
“Coinbase has not had a data breach,” the company’s support account posted on X. It said Amplitude “experienced a security incident which impacted a small subset of Coinbase customer contact data.”
What Coinbase says
Coinbase said it found no evidence of unauthorised access to its own systems, and that customer funds were “not impacted.”
The company is notifying affected customers and regulators as required by law.
Coinbase had not said how many customers were affected, what contact data was exposed, or when the incident took place at the time of writing. Amplitude’s other clients were also affected, but Coinbase did not name them.
Why contact data matters
Even without access to funds, leaked contact details can be used to target people with phishing emails, calls and texts that pretend to come from Coinbase.
Coinbase’s 2025 breach
This is not the first time Coinbase customer data has been exposed. In 2025, criminals bribed overseas customer support agents to steal personal data from fewer than 1% of Coinbase’s monthly transacting users.
A later filing with the Maine attorney general put the number of affected customers at 69,461. That data included names, addresses, partly hidden Social Security numbers and images of government ID.
Coinbase refused a $20 million ransom demand and instead offered a $20 million reward for information leading to arrests.
What happens next
The key details still to come are how many Coinbase customers were affected and what information was exposed. Customers should treat any unexpected contact claiming to be from Coinbase with caution.
