Coinbase Says Amplitude Incident Exposed Customer Contact Data
Coinbase says an Amplitude incident affected customer contact data but not funds. A claim that more than 70,000 users were affected remains unconfirmed.
Key Notes
- Coinbase says an Amplitude incident affected some customer contact data.
- The exchange reports no evidence of unauthorized access to its systems and says funds were unaffected.
- Coinbase has not confirmed the online claim of more than 70,000 affected users.
Coinbase says a security incident at analytics vendor Amplitude affected some of its customers’ contact data. The exchange says it found no evidence of unauthorized access to Coinbase systems and that customer funds were not impacted.
In an October 28 statement, Coinbase Support identified the exposure as a third-party incident that also affected data belonging to other Amplitude customers. The exchange said it is notifying affected customers and regulatory agencies in line with its legal obligations.
Read Coinbase’s statement about the Amplitude incident.
— Coinbase Support (@CoinbaseSupport) October 28, 2026
Contact-Data Exposure, With the Scope Still Unclear
Coinbase described the affected information as a small subset of customer contact data. It did not publish a customer count, list the individual data fields involved or explain when the vendor incident began.
Its assurance about customer funds is separate from the privacy impact of the exposure. The statement acknowledges that customer information was affected while saying the company has found no evidence that attackers entered its own systems.
The announcement does not provide a technical explanation of how Amplitude was accessed, identify an attacker or describe the notifications sent to individual customers.
The 70,000-User Claim Is Not Confirmed
An earlier post by the account DelCrxpto claimed attackers obtained contact information for more than 70,000 Coinbase users. That post supplied no supporting documentation or explanation for the figure.
Coinbase has not confirmed the number. It should therefore be treated as an unverified claim, rather than the established size of the Amplitude exposure.
Watch for Support Impersonation
Contact information can make unsolicited messages or calls more convincing. That is a potential follow-on risk, not evidence that this incident has already resulted in account takeovers or cryptocurrency losses.
Coinbase’s standing security guidance says its agents will not request passwords, two-factor authentication codes or recovery phrases, or tell customers to move funds to a new wallet. It recommends reaching support through its official contact details and treating unexpected links cautiously.
CoinScreamer’s recent Keystone coverage examined similar impersonation concerns after customer records were exposed. That was a separate incident involving different systems.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
