Companies
Coinbase Addresses Data Exposure Linked to Amplitude Security Incident
Coinbase has formally denied reports of a data breach, attributing the exposure of some customer contact details to a security incident involving Amplitude, a third-party analytics provider. The incident occurred on October 27-28, 2026, and affected a small subset of Coinbase users.
According to Coinbase, the exposed data was limited to email addresses and phone numbers. While the company maintains that there is no evidence of unauthorized access to its internal systems, security firm SlowMist reported that over 70,000 Coinbase users' contact data may have been accessed.
Coinbase has assured its users that sensitive information such as passwords and transaction histories remains secure, and customer funds are safe. The exchange is actively notifying affected customers via email and has reported the incident to regulatory authorities as required.
In light of the exposure, Coinbase has warned users to be vigilant against potential phishing attempts and social engineering scams that may arise from the leaked contact information. Users are advised to treat unsolicited communications claiming to be from Coinbase with caution and to verify any account-related issues through official channels.
Additionally, Binance founder Changpeng Zhao (CZ) has shared security recommendations following a wave of data leaks affecting multiple firms, including Coinbase. He emphasized the importance of using unique email aliases for different exchanges and recommended avoiding SMS-based two-factor authentication to mitigate risks associated with leaked phone numbers.
FAQ
What caused the exposure of Coinbase customer data?
The exposure of some customer contact details was linked to a security incident involving Amplitude, a third-party analytics provider.
What type of customer information was exposed?
The exposed data was limited to email addresses and phone numbers of a small subset of Coinbase users.
Is there evidence of unauthorized access to Coinbase's internal systems?
Coinbase has stated that there is no evidence of unauthorized access to its internal systems.
What should affected users do in light of the data exposure?
Affected users are advised to be vigilant against potential phishing attempts and social engineering scams, and to verify any account-related issues through official Coinbase channels.
What security recommendations have been made following this incident?
Binance founder Changpeng Zhao recommended using unique email aliases for different exchanges and avoiding SMS-based two-factor authentication to mitigate risks associated with leaked phone numbers.