EN
Español
Português (Brasil)
Türkçe
Tiếng Việt
Bahasa Indonesia
Polski
Čeština
Română
Slovenčina
Magyar28 Oct 2026
Coinbase says its systems were not breached and customer funds are safe after an incident at analytics vendor Amplitude exposed contact details of a small subset of users. The news landed the same day South Korea opened probes into incidents at Bithumb, Daishin Securities and Mirae Asset.
Exchanges TradeReviewed News Desk
Coinbase denied suffering a security breach on Wednesday, October 28, after an incident at Amplitude, a third-party analytics provider, exposed contact information belonging to what the exchange called a small subset of its customers. According to CryptoSlate, Coinbase said in a post on X that it found no evidence of unauthorized access to its own systems and that customer funds remain secure.
The exchange said it is notifying affected users and regulators. It has not disclosed how many people were affected or exactly which contact details were exposed.
Four data leaks in one day
The Coinbase disclosure coincided with separate incidents at South Korean exchange Bithumb, brokerage Daishin Securities and Mirae Asset Global Investments. Binance founder Changpeng Zhao flagged all of them on X, writing that “4 data leaks” had been reported that day.
Daishin confirmed that personal and financial information of 38,490 customers was exposed after suspicious activity detected on October 17, including names, email and home addresses, login IDs and bank names. Bithumb said attackers reached an internal employee communications system and is still checking whether customer records were touched. South Korea’s Financial Services Commission said it had not confirmed any exposure of wallet addresses or data that could enable fraudulent crypto transfers. Regulators held an emergency meeting and opened on-site investigations.
Why a “no funds lost” leak still matters
Leaked contact data is the raw material for phishing, SIM swapping and fake support calls. Earlier this year, Trezor customer details leaked via a shipping provider, and a separate incident at its email provider led to fraudulent messages asking users for wallet recovery phrases. Zhao also warned that addresses combined with holdings data can expose investors to physical extortion.
What it means for traders
If you hold an account at Coinbase or any affected firm, assume scammers may know your email or phone number. Zhao’s suggestions are practical: use a separate email alias and phone number for exchange accounts, replace SMS two-factor authentication with passkeys or hardware keys, turn on withdrawal address whitelists, review active sessions and API keys, and ignore unsolicited “support” messages. No legitimate exchange will ask for your seed phrase.
Security controls differ a lot between platforms. Our crypto exchange comparison weighs security features alongside fees and liquidity, with BingX ranked first and OKX second, and how we test exchanges explains the criteria. Bitcoin traded near $81,430 on OKX at the time of writing.
For information only, not financial advice.
Sources
- CryptoSlate: Coinbase says it wasn’t breached, but hackers don’t need to steal crypto to hurt users
- OKX public market data (BTC-USDT)
Follow TradeReviewed on X and our Telegram channel: you hear crypto and trading news here first.
Related reviews
Sources
News is for information only and is not financial advice. More crypto news
You'll hear it here first
Get crypto news first on our Telegram channel.