Coinbase disclosed on Tuesday that a security incident at its third-party analytics partner, Amplitude, resulted in the exposure of contact data belonging to a limited group of its customers. The Nasdaq-listed exchange clarified that the compromise occurred within the vendor's infrastructure rather than Coinbase's own systems. According to a statement from Coinbase Support, there is no evidence of unauthorized access to the exchange's internal networks, and customer funds were not impacted by the event.

Vendor Incident Details

The company described the affected user base as a "small subset" of its total customer count, noting that other Amplitude clients were also affected by the breach. Coinbase has not specified the exact number of users involved, the specific types of contact information exposed, or the date the incident occurred. Amplitude has not yet released a public statement detailing how the security failure happened or the full scope of the data leak. The exchange stated it is currently notifying affected customers and relevant regulatory agencies in compliance with legal obligations.

Context of Recent Security Issues

This incident follows a significant data breach disclosed by Coinbase in May 2025, where cybercriminals bribed overseas support agents to steal personal data from less than 1% of monthly transacting users. In that previous case, a filing with the Maine attorney general identified 69,461 affected customers, with exposed data including names, addresses, and masked Social Security numbers. The current event adds to a broader trend of crypto firms experiencing data exposure through third-party partners. In September, hardware wallet maker Trezor reported that a breach at shipping provider ShipMonk exposed the personal details of tens of thousands of U.S. customers, highlighting persistent vulnerabilities in the supply chain.

What to Watch Next

Regulators and users will likely monitor whether Coinbase provides more granular details regarding the specific data points exposed in the Amplitude incident. Security experts may also assess the potential for phishing or social engineering attacks using the leaked contact information. Additionally, attention may turn to whether other Amplitude clients in the financial sector disclose similar breaches, potentially indicating a wider systemic issue with the analytics platform's security protocols.