--- title: "Coinbase Confirms Vendor Data Breach, Says User Funds and Core Systems Remain Safe" description: "A security incident at third-party analytics provider Amplitude exposed contact details for a subset of Coinbase users, raising phishing risks." url: https://basisdesk.news/news/coinbase-vendor-amplitude-data-breach-funds-safe published: 2026-10-28T03:26:17.651Z modified: 2026-10-28T03:26:17.651Z section: Security & Hacks author: Basis Desk Newsroom (AI-generated, source-verified) sentiment: neutral tickers: [BTC, ETH] tags: [coinbase, amplitude, data-breach, cybersecurity, phishing] license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice. --- # Coinbase Confirms Vendor Data Breach, Says User Funds and Core Systems Remain Safe A security incident at third-party analytics provider Amplitude exposed contact details for a subset of Coinbase users, raising phishing risks. ## At a glance - **What happened:** Coinbase confirmed third-party analytics provider Amplitude suffered a data breach that exposed contact information for a subset of users [1]. - **Why it matters:** While core exchange systems and customer funds were unaffected, exposed contact records heighten phishing risks for impacted users [1]. - **Who is affected:** A small subset of Coinbase customers and other corporate clients of Amplitude [1]. - **What's next:** Coinbase is issuing direct email notices to all impacted users as required by law [1]. - **Primary source:** [Coinbase says user funds are safe after vendor exposes customer data](https://www.coindesk.com/tech/2026/10/28/coinbase-says-customer-funds-are-safe-after-third-party-vendor-exposes-customer-contact-info) — coindesk.com ## Key points - Coinbase stated its core systems were not breached and customer funds remain entirely safe following an incident at a third-party vendor [1]. - The data leak occurred at analytics provider Amplitude, exposing contact information for a small subset of Coinbase users [1]. - Impacted users are being notified via email, with exposed details posing risks of targeted phishing and social-engineering attempts [1]. ## Editorial remark - **Context:** Cryptocurrency exchanges rely on numerous software vendors for tracking and analytics, which increasingly present operational vulnerabilities outside core wallet infrastructure. - **Impact:** A subset of Coinbase users face heightened risks of phishing and credential-harvesting communications using their exposed contact details. - **Watch:** Disclosures regarding the specific number of affected accounts and updates on Amplitude's vendor-side security investigation. Cryptocurrency exchange Coinbase clarified that its internal systems were not breached and customer funds remain completely secure following an incident involving an external analytics vendor [1]. The exchange disputed circulating claims of a direct hack, confirming that the exposure originated at Amplitude, a third-party analytics service provider utilized by the firm [1]. According to an official statement by the Coinbase Support account on X, the incident compromised contact information belonging to a "small subset" of Coinbase accounts alongside data from other Amplitude clients [1]. Coinbase confirmed that unauthorized parties did not access its core infrastructure [1]. The company noted that it has begun directly notifying impacted users by email in compliance with legal disclosure mandates [1]. Coinbase did not disclose the precise number of affected accounts or the specific contact data fields involved in the leak [1]. ## Third-Party Vectors and Phishing Threats The episode highlights ongoing counterparty and supply-chain vulnerabilities facing major digital asset platforms, where corporate perimeters remain intact while third-party integrations expose client metadata [1]. While private keys, authentication credentials, and user deposits were not compromised, the leak of email addresses or telephone numbers exposes impacted users to targeted phishing schemes and social-engineering campaigns [1]. The vendor incident follows broader regulatory scrutiny over the platform's operational controls, including when the [Central Bank of Ireland fined Coinbase €3.25 million over safeguarding deficiencies](https://basisdesk.news/news/central-bank-ireland-fines-coinbase-safeguarding-settlement). At the time of writing, the broader crypto market traded flat to slightly higher, with $BTC changing hands near $80,880 and $ETH trading around $2,357. Coinbase has not announced further remediation timelines beyond delivering mandated notification emails to affected customers [1]. ## FAQ **Were Coinbase funds or passwords compromised in the breach?** No. Coinbase confirmed that its systems experienced no unauthorized access, passwords and private keys were unaffected, and customer funds remain safe [1]. **What information was exposed?** Contact information for a small subset of Coinbase customers was exposed through Amplitude, a third-party analytics provider [1]. ## Sources 1. [Coinbase says user funds are safe after vendor exposes customer data](https://www.coindesk.com/tech/2026/10/28/coinbase-says-customer-funds-are-safe-after-third-party-vendor-exposes-customer-contact-info) — coindesk.com, 2026-10-28 --- Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai