Overview
- Coinbase said a security incident at analytics vendor Amplitude on Oct. 27–28 exposed contact information for a small subset of its customers.
- The company says its own systems were not accessed and customer funds were not impacted and it is emailing impacted users and notifying regulators.
- Reporting and company statements indicate the exposed fields were contact details such as email addresses and phone numbers, but Coinbase has not published a precise affected‑user count or a full technical timeline.
- Security firm SlowMist circulated an unverified estimate of more than 70,000 affected Coinbase users, a figure Coinbase has not confirmed and that leaves users vulnerable to targeted phishing, SIM‑swap, and social‑engineering scams.
- The case underscores recurring vendor and supply‑chain risks in crypto and finance, with multiple South Korean firms reporting separate data incidents the same week and Coinbase citing a prior May 2025 data exposure as relevant context.