- A limited amount of customer contact information was leaked as part of a breach at Amplitude, a third party analytics provider for Coinbase and many other companies.
- Coinbase have confirmed their internal systems have had no unauthorised access and that there has been no compromise to customer funds or private keys.
- The exchange is informing impacted customers about the breach by sending emails, as per legal requirements. The breach has also impacted other companies using Amplitude.
- This breach does pose a risk of phishing/social engineering. The email and phone number of customers have been leaked meaning attackers can impersonate Coinbase.
A limited amount of customer contact information has been leaked due to a breach at Amplitude. Amplitude is a third party analytics provider for Coinbase and many other technology companies.
Coinbase has not had a data breach.
Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers.
We’ve found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted.
We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.
— Coinbase Support (@CoinbaseSupport) October 28, 2026
Coinbase confirmed the breach occurred on October 28th 2026 in a post from their official Support account on X. They confirmed that the breach came from Amplitude and that whilst it has impacted Coinbase customers it has also impacted other companies using the service.
Coinbase Systems Have No Unauthorised Access
Coinbase have confirmed they have found no unauthorised access to their internal systems. There has been no compromise to customer funds, private keys or account details.
Only customer contact information (emails/phone numbers) has been compromised, this information is collected by Amplitude for analytics within their products. Coinbase are contacting impacted customers directly via email.
Phishing/Social Engineering Risk
Whilst customer funds are safe, this breach does pose a risk. Email and phone numbers have been leaked so can be used for phishing. Threat actors can use the leaked Coinbase customer contact information to send phishing emails, fake login pages or call customers pretending to be Coinbase support.
Security researchers often find that breaches occur at data brokers/vendors which then allow them to try and take over accounts. Coinbase have yet to confirm how many customers have been impacted or if any other companies using Amplitude have been impacted.
Stay informed with the latest trends in Web3, blockchain innovation, and cybersecurity updates at 3verseTV
You need to login in order to Like
Leave a comment