Coinbase Reports Breach of Customer Data by Analytics Vendor

Security Incident at Analytics Provider Affects Coinbase Customers

Coinbase has announced that a security breach at its analytics vendor, Amplitude, has compromised the contact information of a limited number of its customers. However, the cryptocurrency exchange reassured users that there was no unauthorized access to its own systems and that customer funds remain secure.

In a statement via social media, Coinbase clarified, "Coinbase has not had a data breach. Amplitude experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers." The company is in the process of notifying the affected individuals and relevant regulators as part of its compliance obligations.

Details regarding the number of customers affected or the specific types of contact data exposed have not been disclosed. This incident follows a more severe breach in May 2025, when Coinbase revealed that cybercriminals had bribed customer support agents, leading to the exposure of personal data for approximately 69,461 users.

Context of Data Breaches in the Crypto Sector

This incident highlights a troubling trend in the cryptocurrency industry, where third-party vendors often become the weak link in data security. For example, in September, hardware wallet manufacturer Trezor reported a breach at shipping partner ShipMonk, which resulted in the exposure of sensitive information for over 67,000 customers. Such incidents raise concerns about the ongoing risks associated with customer data security in the crypto space.