Coinbase said a security incident involving Amplitude, a third-party analytics provider, affected contact information connected to a small subset of its customers. The cryptocurrency exchange said its own systems were not breached and that customer funds were not affected.
The company said it was notifying customers and regulators as required by law, but did not disclose the number of people involved, the specific types of contact data exposed or when the incident occurred. Amplitude has not been identified as the only company whose customer information was affected.
What Coinbase disclosed
Coinbase’s support account said on October 28 that the incident occurred at Amplitude, rather than within Coinbase’s infrastructure. The exchange reported no evidence of unauthorized access to its own systems and emphasized that the event did not affect customer funds.
The information involved was described only as customer contact data. That wording does not establish whether the records included names, email addresses, phone numbers or other details. Coinbase also did not say how the affected records were accessed or how many of its customers were included.
According to Decrypt, the exchange is handling notifications to affected customers and regulators in line with its legal obligations. The distinction between a direct breach and an incident at a service provider is significant because companies often rely on outside vendors for analytics and other operational functions, while customers may still face exposure when their information is processed by those vendors.
Context from Coinbase’s earlier breach
The disclosure follows a substantially larger incident Coinbase reported in May 2025. The exchange said criminals had bribed overseas customer-support agents to obtain personal data from fewer than 1% of its monthly transacting users.
Coinbase rejected a $20 million ransom demand and offered a $20 million reward for information leading to the attackers’ arrest. A subsequent filing with Maine’s attorney general said 69,461 customers were affected. The exposed information included names, addresses, masked Social Security numbers and images of government identification documents.
Other cryptocurrency companies have also reported incidents involving outside partners. Trezor said in August and September that a breach at shipping provider ShipMonk exposed names, phone numbers and home addresses of tens of thousands of U.S. customers. Trezor warned affected users about impersonation attempts and physical-security risks.
Moneyiar market picture
Moneyiar data as of October 25, 2026, shows mixed performance among the listed digital assets:
- Lighter (LIT): $3.1819342396, down 1.45% in 24 hours and up 5.12% over seven days.
- BAS (BAS): $0.0169243841, down 1.24% in 24 hours and 7.19% over seven days.
- Data Network (DATA): $0.1503553856, down 4.42% in 24 hours and 7.71% over seven days.
- FUNToken (FUN): $0.0089182414, up 1.62% in 24 hours and 0.08% over seven days.
These figures are Moneyiar market data recorded at approximately 22:38-22:39 on October 25, 2026, and do not indicate a connection between the assets’ price movements and the Coinbase disclosure.
