Coinbase has rejected reports that it was hacked, saying an incident at Amplitude, a third-party analytics provider, exposed contact information belonging to a small subset of its customers. The cryptocurrency exchange said its own systems showed no unauthorized access and that customer funds remain safe.
The disclosure highlights how customers can face security risks through companies connected to a financial platform, even when the platform’s core infrastructure has not been breached. Coinbase is notifying affected users by email, as required by law, while warning that exposed contact details could be used in phishing or social-engineering attempts.
What Coinbase disclosed
Coinbase Support said the incident began at Amplitude rather than at Coinbase. The exposed information involved customer contact data and was part of information connected to multiple Amplitude clients, according to the exchange. Coinbase described the affected group as a “small subset” of its customers.
The exchange did not disclose how many Coinbase users were affected. It also did not specify exactly which contact fields were exposed, leaving open whether individual records included email addresses, phone numbers or other contact information. The source material identifies email addresses and phone numbers as the types of information that could be involved, but does not provide a complete list of exposed fields.
Coinbase said it has not detected unauthorized access to its own systems. It also said customer funds remain safe and that the incident did not involve a breach of the exchange’s core systems. CoinDesk reported the disclosure and reached out to Coinbase for comment.
Why exposed contact data still matters
Contact information is less sensitive than credentials or private keys, but it can still be useful to attackers. An email address or phone number can help criminals create convincing messages that appear to come from an exchange, customer-support team or another trusted service.
Those messages may attempt to persuade users to reveal passwords, authentication details or other information. This type of manipulation is commonly described as phishing or social engineering. The source material does not say that Coinbase users have already lost funds or that exposed information has been used in attacks.
The episode illustrates supply-chain risk in cybersecurity. A company may protect its own systems while still relying on outside providers for analytics or other services. If information is exposed at one of those providers, customers can face consequences even without unauthorized access to the primary company’s infrastructure.
Coinbase’s notification process is therefore a central part of the response. The exchange said it is contacting impacted customers by email as required by law. However, because the number of affected customers and the precise data fields have not been disclosed, the full scope of the incident remains unclear.
Wider financial-sector breach concerns
The Coinbase disclosure comes alongside reports of customer-data incidents involving financial firms in South Korea. Daishin Securities said personal information belonging to 38,490 customers had been hacked. The information included names, email addresses and mobile phone numbers, after the brokerage detected signs of unauthorized access by hackers the previous week.
Yonhap News Agency also reported that some personal information belonging to Bithumb customers was leaked in a cyberattack by an external party. Financial authorities have begun an inspection into a data breach at Mirae Asset Global Investments.
These incidents involve separate companies and, based on the source material, are not presented as being connected to the Amplitude incident. Together, they show the range of ways customer information can be exposed across exchanges, brokerages, analytics providers and other financial-service organizations.
Moneyiar market picture
Moneyiar data at 22:39 on October 25, 2026, shows mixed performance among the four tracked digital assets:
- Lighter (LIT) was priced at $3.1819342396, down 1.45% over 24 hours but up 5.12% over seven days.
- Four (FORM) traded at $0.2210079715, up 0.66% over 24 hours and down 7.29% over seven days.
- BAS (BAS) stood at $0.0169243841, down 1.24% over 24 hours and 7.19% over seven days.
- Safe (SAFE) was priced at $0.1029229466, down 1.85% over 24 hours but up 1.99% over seven days.
The market figures describe price movements and do not indicate whether any of the assets are connected to the Coinbase or Amplitude incident.
