Coinbase says customer funds safe after Amplitude vendor data exposure

Key points

• Coinbase says the exposure originated at Amplitude, a third-party analytics provider, not at the exchange.
• Only a "small subset" of customer contact information was exposed, alongside data from other Amplitude clients.
• Affected customers are being emailed as required by law and may face phishing or social-engineering attempts.

Coinbase says customer funds are safe after a third-party vendor exposed customer contact information, denying that the exchange itself was hacked. The Nasdaq-listed company said the incident originated at Amplitude, an analytics provider, and that its own systems showed no unauthorised access, CoinDesk reports.

According to Coinbase Support's X account, the exposed material covers only a "small subset" of contact information, alongside data relating to other Amplitude clients. The exchange is emailing affected customers as required by law. It has not said how many customers are involved or which contact fields were exposed.

The company stressed that passwords, private keys and funds were not compromised. Even so, exposed email addresses and phone numbers can feed phishing and social-engineering attempts, and the episode highlights supply-chain risk: customers can be exposed through third parties even when a company's core infrastructure holds.

Read the full story on CoinDesk →