Coinbase Confirms Vendor Data Breach, Says User Funds and Core Systems Remain Safe

Cryptocurrency exchange Coinbase clarified that its internal systems were not breached and customer funds remain completely secure following an incident involving an external analytics vendor ¹. The exchange disputed circulating claims of a direct hack, confirming that the exposure originated at Amplitude, a third-party analytics service provider utilized by the firm ¹.

According to an official statement by the Coinbase Support account on X, the incident compromised contact information belonging to a "small subset" of Coinbase accounts alongside data from other Amplitude clients ¹. Coinbase confirmed that unauthorized parties did not access its core infrastructure ¹. The company noted that it has begun directly notifying impacted users by email in compliance with legal disclosure mandates ¹. Coinbase did not disclose the precise number of affected accounts or the specific contact data fields involved in the leak ¹.

Third-Party Vectors and Phishing Threats

The episode highlights ongoing counterparty and supply-chain vulnerabilities facing major digital asset platforms, where corporate perimeters remain intact while third-party integrations expose client metadata ¹. While private keys, authentication credentials, and user deposits were not compromised, the leak of email addresses or telephone numbers exposes impacted users to targeted phishing schemes and social-engineering campaigns ¹.

The vendor incident follows broader regulatory scrutiny over the platform's operational controls, including when the Central Bank of Ireland fined Coinbase €3.25 million over safeguarding deficiencies. At the time of writing, the broader crypto market traded flat to slightly higher, with $BTC changing hands near $80,880 and $ETH trading around $2,357.

Coinbase has not announced further remediation timelines beyond delivering mandated notification emails to affected customers ¹.