Coinbase says vendor data exposure did not breach its systems

Key facts

• Coinbase stated that a security incident at analytics vendor Amplitude exposed some customer contact data.
• The exchange denied any unauthorized access to its own systems.
• Customer funds were not affected by the incident.

Coinbase stated on Wednesday that a security incident at its analytics vendor, Amplitude, resulted in the exposure of some customers' contact data. The cryptocurrency exchange emphasized that its own systems were not breached and that customer funds remained unaffected. The incident impacted a limited number of Coinbase customers, as well as other clients of Amplitude. This disclosure follows reports of other cyberattacks affecting financial firms, including Bithumb in South Korea, which is investigating a potential breach of its internal work platform, and Daishin Securities, which reported a leak of customer information. In a separate incident in May 2025, Coinbase disclosed a data breach that led to estimated reimbursement and remediation costs of up to $400 million.