Amplitude Breach Exposes Coinbase Customer Contact Data

On October 28, Coinbase announced that a security breach at analytics provider Amplitude compromised the contact details of a limited group of its users. The exchange confirmed that customer funds remain secure and that its internal systems experienced no unauthorized intrusion.

Both regulators and impacted users are currently receiving notifications from the exchange. This disclosure emerged precisely one day prior to Coinbase’s third-quarter earnings report, sparking inquiries concerning potential financial consequences.

Amplitude Incident Hits Coinbase Customer Contact Data

According to Coinbase Support, the security event at Amplitude compromised user contact details maintained by the vendor while also impacting several of Amplitude’s other corporate clients. The exchange attributed the leak entirely to the third-party provider rather than any vulnerabilities within Coinbase infrastructure.

Coinbase has not had a data breach.

Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers.

We’ve found no evidence of unauthorized access to Coinbase systems, and…

— Coinbase Support (@CoinbaseSupport) October 28, 2026

While describing the affected group as a small subset, Coinbase refrained from disclosing the exact user count, the specific contact data fields that leaked, the timeline of the breach, or the identities of the other corporate clients involved, leaving the overall magnitude uncertain.

The primary concern centers on compromised contact details, though Coinbase explicitly reiterated that user assets stayed untouched.

Affected Coinbase Customers Are Being Notified

In accordance with legal mandates, Coinbase has begun alerting impacted accounts, detailing precisely which records were compromised and who was caught in the exposure.

Because leaked contact information often paves the way for impersonation scams—a hazard Coinbase has previously encountered—the risk persists even when account balances remain secure. For example, during a May 2025 security lapse, malicious actors bribed overseas support contractors to extract client databases.

That prior incident saw the exchange reject a $20 million extortion demand while offering an equivalent $20 million bounty for tips leading to arrests. Official records submitted to the Maine attorney general documented 69,461 impacted users whose full names, physical addresses, masked Social Security numbers, and government identification files were revealed—types of sensitive categories not presently linked to the Amplitude event.

Similar third-party data incidents have impacted other digital asset platforms as well. In September, hardware wallet maker Trezor reported that a security breakdown at logistics partner ShipMonk exposed the physical addresses, phone numbers, and full names of 67,000 U.S. users, adding to nearly 14,000 records disclosed previously in August. Certain stolen files dated back to 2019 and remained vulnerable long after ShipMonk assured Trezor they had been purged. Consequently, Trezor issued warnings to patrons regarding fraudulent phone calls, messages, and physical mailers, alongside physical safety hazards.

Coinbase Data Exposure Disclosure Arrives Ahead of Earnings

Coinbase is set to publish its Q3 financial figures following the closing bell on Thursday, October 30. An analysis by BeInCrypto suggested that any related expenses will likely register during the fourth quarter, given that the third quarter concluded on September 30.

Shareholders face a costly precedent, as Coinbase previously projected reimbursement and remediation outlays as high as $400 million following the May 2025 intrusion. A specific financial projection tied to the Amplitude event would help quantify the monetary damage.

FAQ

What type of customer information was exposed in the Amplitude incident?

The incident hit customer contact information stored at Amplitude. Coinbase said a small subset of customers were affected and that funds were not impacted.

What is Amplitude’s role with Coinbase?

Amplitude is an analytics vendor that serves Coinbase and other clients. The breach happened at Amplitude, not on Coinbase’s own systems.

Did the breach affect Coinbase’s own systems?

No. Coinbase found no evidence of unauthorized access to its systems. The exposure happened at third-party vendor Amplitude.

When is Coinbase scheduled to release its third-quarter results?

Thursday, October 30, after the market closes. The results cover the quarter that ended September 30.

How did criminals obtain customer records in Coinbase’s separate May 2025 incident?

Criminals bribed overseas support agents to steal customer records. A filing with the Maine attorney general counted 69,461 affected customers.

This article is for information only and is not financial advice.