Coinbase said a security incident at third-party analytics provider Amplitude exposed contact information for a small subset of its customers, according to a Wednesday update from its Coinbase Support account on X. The exchange said it found no evidence that its own systems were breached and that customer funds were not affected.
Scope of exposure remains unclear
Coinbase did not specify how many customers were affected or exactly what type of contact data was exposed. The company described the group as a “small subset” of users, a term that could cover a handful of accounts or a larger group. Customers of other companies that use Amplitude were also affected, Coinbase said. The exchange did not characterize the incident as a direct hack of its platform.
Because the number of affected users and the nature of the exposed data have not been disclosed, the full scale of the incident is difficult to assess. Users should remain alert for suspicious emails or messages that may reference the incident.
Other incidents reported the same day
The Coinbase disclosure came alongside other reports of cyber incidents affecting financial firms. In South Korea, crypto exchange Bithumb said it is investigating whether a breach of its internal work platform exposed customer information. Separately, brokerage Daishin Securities reported a leak of personal and credit information tied to 38,490 customers.
The incidents highlight that attackers are targeting both crypto and traditional financial companies.
Prior data breach
Coinbase has dealt with a data incident before. In May 2025, the exchange disclosed a separate breach that affected less than 1% of its monthly transacting users. Coinbase put the reimbursement and remediation costs for that episode at up to $400 million.
The earlier breach has prompted users to watch the latest incident closely, even though Coinbase says its own systems were not compromised.
