EN
Español
Português (Brasil)
Türkçe
Tiếng Việt
Bahasa Indonesia
Polski
Čeština
Română
Slovenčina
Magyar28 Oct 2026
Coinbase says a security incident at its analytics vendor Amplitude exposed contact details of a subset of customers, while its own systems and customer funds were not affected. SlowMist's security chief puts the number of affected users above 70,000, a figure Coinbase has not confirmed.
Exchanges TradeReviewed News Desk
Coinbase has confirmed that contact details belonging to some of its customers were exposed, but says the leak came from a third party rather than its own infrastructure. According to CriptoNoticias and Journal du Coin, the exposed data sat with Amplitude, a San Francisco product analytics company that many apps use to track how users move through their screens.
What Coinbase says happened
The story broke late on 27 October, when users on X, including the account @zubic_eth, shared emails from Coinbase warning about a data incident. Rumours of a direct hack spread quickly. Coinbase Support replied publicly that there is no evidence of unauthorized access to Coinbase’s internal systems and that customer funds are safe.
The company says a “small subset” of customer contact information was compromised during the incident at Amplitude, mixed in with data from Amplitude’s other clients. Coinbase is notifying affected customers privately and says it is reporting the event to the relevant regulators.
How many users are affected?
Coinbase has not disclosed how many customers were hit or which fields were exposed. Journal du Coin reports that 23pds, chief information security officer at blockchain security firm SlowMist, confirmed the leak is real and said it involves contact details of more than 70,000 users, while adding that he could not say whether passwords or funds were affected. Treat that number as an outside estimate until Coinbase publishes its own figure.
The incident lands on a busy day for exchange security. South Korean exchange Bithumb reported an intrusion into an internal system, and broker Daishin Securities disclosed stolen data for 38,490 clients. Former Binance CEO Changpeng Zhao responded by urging users to drop SMS two-factor authentication.
Why a contact-data leak still matters
Analytics tools do not hold private keys or balances, but emails and phone numbers are exactly what phishing crews need. Coinbase already knows the cost: in 2025, outsourced support agents leaked data on close to 70,000 customers, and the exchange estimated the bill at 180 to 400 million dollars including reimbursements to scam victims. A similar vendor leak hit Indian exchange CoinDCX via Mixpanel in November 2025.
What it means for traders
- Expect targeted phishing: calls, texts or emails claiming to be Coinbase security. Coinbase will never ask for your seed phrase, password or a 2FA code by phone.
- Move off SMS 2FA: an exposed phone number raises SIM swap risk. A hardware key or passkey is safer.
- Open the app yourself: never click links in unexpected emails, even if they use your name.
- Review where you trade: security track record belongs in any exchange choice. See our crypto exchange comparison and how we test exchanges. In our testing BingX ranks first and OKX second.
This article is for information only and is not financial advice.
Follow TradeReviewed on X and our Telegram channel: you hear crypto and trading news here first.
Related reviews
Sources
- CriptoNoticias: Se filtraron datos de algunos usuarios de Coinbase
- Journal du Coin: Coinbase : nouvelle fuite de données via son prestataire Amplitude, les fonds restent intacts
News is for information only and is not financial advice. More crypto news
You'll hear it here first
Get crypto news first on our Telegram channel.