Cryptocurrency exchange Coinbase has reported that a security incident involving third-party analytics vendor Amplitude has resulted in the exposure of contact information belonging to a subset of its users. The exchange emphasized that its own internal systems were not compromised during the event and that all customer funds remain completely secure and unaffected.
According to updates shared by Coinbase Support on the social media platform X, the security breach at Amplitude impacted what the exchange described as a "small subset" of its user base, alongside other clients who utilize Amplitude’s analytics services. While the exact number of affected Coinbase customers has not yet been officially disclosed, the company maintains that the incident is isolated to the third-party analytics provider rather than a direct intrusion into Coinbase infrastructure.
The disclosure comes during a broader wave of cybersecurity concerns affecting both the digital asset industry and traditional financial institutions globally. On the same day as the Coinbase announcement, international financial platforms reported varying degrees of security breaches and data leaks. In South Korea, major cryptocurrency exchange Bithumb confirmed it was actively investigating an internal system breach to determine whether customer information was compromised via its internal work platform. Simultaneously, traditional financial brokerage Daishin Securities reported a separate data leak that allegedly exposed the personal and credit information of nearly 38,500 customers.
As the cryptocurrency industry continues to rely heavily on third-party software vendors, customer relationship management tools, and data analytics providers, incidents originating outside of core exchange architectures have become an increasing vector for peripheral data exposure. Vendors like Amplitude process large volumes of user interaction metrics to help companies optimize digital products and user experiences. However, any vulnerability or unauthorized access within these external environments can inadvertently expose basic identifying data, such as email addresses, names, or phone numbers, even when the primary financial ledger and trading systems remain entirely locked down.
Coinbase has faced scrutiny regarding data security incidents in the past. In May 2025, the exchange disclosed a separate and more direct data breach that impacted fewer than 1% of its monthly transacting users. At the time, the security event prompted extensive remediation efforts, with the company estimating that reimbursement and operational remediation costs could climb as high as $400 million. That historical precedent underscores the heightened sensitivity surrounding any security notification issued by major digital asset platforms, regardless of whether the current incident stems from a vendor rather than an internal flaw.
The recent event at Amplitude highlights the complex web of interconnected software dependencies that modern financial technology companies must manage. While exchanges invest heavily in robust multi-factor authentication, cold storage solutions, and proprietary perimeter defense systems, their operational ecosystems often require sharing non-sensitive metadata or contact details with specialized cloud-based analytics platforms. When those external vendors experience a breach, the resulting fallout frequently tests user trust and forces exchanges to rapidly audit third-party access permissions.
Security researchers and industry analysts frequently warn that attackers view third-party vendors as softer targets compared to highly fortified cryptocurrency exchanges. By compromising a peripheral service provider, malicious actors can occasionally harvest metadata that can later be leveraged for targeted phishing campaigns, social engineering attacks, or credential-stuffing attempts against individual users. Consequently, exchanges routinely advise customers to remain vigilant against suspicious communications, unsolicited text messages, or phishing emails following any public disclosure of a vendor-related data leak.
Coinbase has stated that it is continuing to investigate the full scope of the Amplitude incident alongside the vendor to determine exactly which accounts were impacted and what specific data fields were accessed. Representatives for Cointelegraph reached out to Coinbase for additional clarification regarding the precise headcount of affected users, but no official response had been provided by the time of publication.
As investigations unfold across the affected organizations, the developments serve as a stark reminder of the persistent cybersecurity challenges facing the financial sector. With digital asset platforms and traditional brokerages alike managing sophisticated threat landscapes, the incident underscores the critical importance of supply chain security, rigorous vendor risk management, and continuous oversight of third-party data integrations in safeguarding user privacy across the global financial ecosystem.
