The exchange says no funds were touched and its own systems were not compromised, but a small group of users may have had contact details exposed through a third-party partner
Coinbase has moved to quash reports of a data breach, saying the incident originated not in its own systems but at one of its vendors. The cryptocurrency exchange confirmed that Amplitude, its analytics provider, suffered a security incident that may have affected a limited number of its users. It stressed that no customer funds were exposed.
“Coinbase has not had a data breach,” the company said on X. “Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers.”
The clarification followed a report by 23pds of blockchain security firm SlowMist, which claimed that Coinbase had suffered a breach in which hackers obtained the contact information of more than 70,000 users.
Coinbase sought to reassure its customers on the question of safety. “We’ve found no evidence of unauthorised access to Coinbase systems, and customer funds were not impacted,” the company added. It said it is notifying every user affected by the incident and is also in contact with regulators in “accordance with our legal obligations.”
Several questions remain unanswered. Coinbase has not said how many customers were affected by the Amplitude incident, when it took place or who was responsible. Amplitude is an analytics vendor that tracks how users behave on a platform, including their clicks and engagement patterns.
The episode is a reminder of how far a company’s data exposure can extend beyond its own walls. Coinbase is one of the world’s largest crypto exchanges, with more than 100 million registered users, and it relaunched in India in June this year with support for transactions in rupees.
It is not the first time the exchange has had to address a data security problem. In May 2025, Coinbase disclosed that criminals had bribed overseas support agents to copy customer records, including names, phone numbers, government ID images and transaction histories. That incident affected more than 69,000 users.
The latest disclosure comes amid a run of cybersecurity worries. The State Bank of India (SBI) acknowledged earlier this month a data breach involving nearly 3,900 customer records. Critical vulnerabilities have also surfaced in EDK II open-source code and in the PHP programming language.
