Coinbase indicates that a security incident occurred with the third-party analytics service provider Amplitude, which affected the contact information of 'a small portion' of their customers, but it is emphasized that the exchange itself was not compromised.

An account supported by Coinbase stated in a tweet on Tuesday evening: "There was no data breach with Coinbase. As an analytics provider, we experienced a security incident that affected a small portion of the contact data of Coinbase customers, as well as other customers of Amplitude."

Coinbase also indicates that no evidence of unauthorized access to their system was found, and customer funds 'were not affected.' The company stated that they are notifying the affected customers and regulatory authorities in accordance with legal obligations.

Coinbase did not specify how many customers were affected, what types of contact information was leaked, or when the incident occurred, nor did it identify any other Amplitude customers who were affected.

Coinbase Leaks in 2025

Coinbase disclosed a more serious incident in May 2025. At that time, the company stated that cybercriminals bribed overseas customer service staff to steal personal data of less than 1% of its monthly trading users. The exchange refused a ransom demand of 20 million US dollars and instead offered a reward of 20 million US dollars for information that would help apprehend the attackers.

The situation where encrypted companies' customer data is leaked through partners is not uncommon. In September, hardware wallet manufacturer Trezor stated that a data breach by logistics service provider ShipMonk exposed the names, phone numbers, and home addresses of 67,000 American customers. Previously, in August, the company reported that nearly 14,000 people were affected. Some of these records date back to 2019, which was years after ShipMonk informed Trezor that such data had been deleted. Trezor warned affected customers to be cautious of forged emails, calls, and letters, as well as to be mindful of personal safety risks.

At that time, cybercrime consultant David Sehyeon Baek told Decrypt that a letter with a person's name and home address meant "we can find you," and the reason why stolen data is still useful years later is that people rarely move houses or change their phone numbers.