Nasdaq-listed cryptocurrency exchange Coinbase has denied reports that it was hacked, saying its systems were not accessed without authorization and customer funds remain safe, after a data breach at third-party analytics provider Amplitude exposed contact information for a small subset of its customers.
Coinbase said the incident originated at Amplitude, a third-party analytics provider, not at the exchange itself. The exposed data includes only a "small subset" of contact information, alongside data related to other Amplitude clients, according to Coinbase Support's X account. The exchange said it is informing affected customers by email as required by law, and stressed that its systems have not detected any unauthorized access.
While customer funds remain safe, the exposure of email addresses and phone numbers can still serve as raw material for phishing and social-engineering attacks, even if passwords, private keys and funds were not compromised. The disclosure underscores supply-chain risks, meaning customers can face security risks via third parties even when a company's core infrastructure remains secure.
Coinbase did not specify how many customers were affected or exactly which contact-data fields were involved, leaving key details unresolved.
The incident comes as several financial firms in South Korea also disclosed customer-data breaches. Daishin Securities said personal information belonging to 38,490 customers was hacked, including names, email addresses and mobile phone numbers. Some personal information of Bithumb customers was also leaked in a cyberattack by an external party, according to Yonhap News Agency. Financial authorities have begun an inspection into a data breach at Mirae Asset Global Investments.
Analysis
Why This Matters
- Third-party vendor breaches expose customers to phishing and identity theft even when a company's own systems are secure, highlighting the vulnerability of supply chains.
- Coinbase is one of the largest regulated crypto exchanges; any incident affecting customer data erodes trust in the broader digital-asset ecosystem.
- Affected users may face targeted attacks using the leaked contact details, and the lack of specifics on the number of victims leaves the full scope unclear.
Background
Coinbase is a major cryptocurrency exchange listed on the Nasdaq, serving millions of customers globally. Third-party data breaches have become a recurring risk across industries, with attackers often using leaked contact information to craft convincing phishing emails or phone calls. The company has previously faced scrutiny over its security practices but maintains that its core infrastructure remains uncompromised in this case.
What to Watch
- Whether any affected Coinbase customers report phishing attacks that can be traced to this breach.
- Further details from Coinbase or Amplitude on the exact number of impacted users and the specific data fields exposed.
- Potential regulatory scrutiny or notification requirements from data-protection authorities in jurisdictions where Coinbase operates.
Checked
12 claims in this story checked against 1 source: 11 supported.
Show each claim
- SupportedCoinbase customer contact information was exposed in a breach at a third-party provider.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “The breach originated at Amplitude, a third-party analytics provider, and exposed contact information for a small subset of Coinbase customers.”
- SupportedCoinbase said customer funds remain safe.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “Coinbase says customer funds are safe.”
- SupportedCoinbase denied reports that it was hacked.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “Nasdaq-listed cryptocurrency exchange Coinbase has denied reports of a hack, saying customer funds are safe.”
- Partly supportedCoinbase’s systems were not accessed without authorization.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “It said the exchange is informing impacted customers by email as required by law, while stressing that its systems have not detected any unauthorized access.”
- SupportedThe incident originated at Amplitude, not at Coinbase.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “The exchange clarified that the incident that led to the breach of customer data originated at Amplitude, a third-party analytics provider, and not the exchange itself.”
- SupportedThe exposed information was a “small subset” of contact information, alongside data related to other Amplitude clients.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “The exposed data includes only a “small subset” of contact information, alongside data related to other Amplitude clients, Coinbase Support’s X handle said.”
- SupportedCoinbase said it was informing affected customers by email as required by law.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “It said the exchange is informing impacted customers by email as required by law”
- SupportedExposed email addresses and phone numbers can be used as material for phishing and social-engineering attacks.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “exposed email addresses and phone numbers can still serve as valuable raw material for phishing and social-engineering attacks”
- SupportedCoinbase did not specify the number of affected customers or exactly which contact-data fields were involved.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “Coinbase did not specify how many customers were affected or exactly which contact-data fields were involved, leaving key details unresolved.”
- SupportedDaishin Securities said personal information belonging to 38,490 customers was hacked, including names, email addresses and mobile phone numbers.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “Daishin Securities said personal information belonging to 38,490 customers was hacked, including names, email addresses and mobile phone numbers”
- SupportedSome Bithumb customers’ personal information was leaked in a cyberattack by an external party, according to Yonhap News Agency.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “some personal information of Bithumb customers was leaked in a cyberattack by an external party, according to Yonhap News Agency”
- SupportedFinancial authorities have begun an inspection into the data breach at Mirae Asset Global Investments.CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data: “Financial authorities have also begun an inspection into the data breach at Mirae Asset Global Investments.”
