Coinbase has denied suffering a data breach after disclosing that a security incident at Amplitude, an analytics vendor, affected a small subset of Coinbase customers’ contact information.

The clarification comes as screenshots claiming that Coinbase suffered a major data breach circulate online, raising concerns among cryptocurrency users.

In a statement shared by Coinbase Support on October 28, the company said Amplitude had experienced a security incident that affected a limited amount of Coinbase customer contact data, along with information associated with other Amplitude customers. Coinbase said it had found no evidence of unauthorized access to its own systems and confirmed that customer funds were not affected.

The company also said it was notifying affected customers and relevant regulatory agencies in accordance with its legal obligations. Its statement did not disclose the exact number of Coinbase customers affected, the specific contact details involved, or how the incident occurred.

The clarification contradicts the impression created by online claims that hackers had breached Coinbase directly and accessed information belonging to more than 70,000 accounts. The circulating screenshots should not be treated as confirmation of a new Coinbase systems breach or as evidence supporting that figure. Coinbase’s statement instead identifies Amplitude, its third-party analytics provider, as the company that experienced the security incident.

READ
PHP2Shell Flaws and AI-Powered Attacks Put Global Organizations on Alert

The incident is separate from Coinbase’s previously disclosed data breach in May 2025, when cybercriminals bribed overseas support personnel to access customer information. That incident affected 69,461 customers and involved information such as names, contact details, certain financial account information, and identity documents. Coinbase said at the time that passwords, private keys, and customer funds were not compromised. The earlier incident should not be confused with the latest vendor-related disclosure.

Customers should remain alert for phishing emails, text messages, and phone calls that use the incident to impersonate Coinbase support. Users should not share passwords, authentication codes, wallet recovery phrases, or private keys, and should avoid transferring cryptocurrency to wallets suggested by unsolicited messages. Anyone who receives a notification claiming to be from Coinbase should verify it through the company’s official app or website rather than relying on links in the message.


Buy ExpressVPN with PayPal or Credit Card

Based on Coinbase’s latest statement, the confirmed issue involves a security incident at Amplitude that affected a small subset of Coinbase customer contact data. The company says it has found no evidence of unauthorized access to Coinbase systems and that customer funds were not affected. Further details about the vendor incident and the number of impacted customers have not yet been disclosed.

Advertisement