- Coinbase says a security incident at vendor Amplitude exposed customer contacts.
- Coinbase found no unauthorized access to its own systems and says funds are safe
- Leaked contact details can fuel phishing and SIM-swap attempts on exchange users.
Coinbase has denied a breach of its own systems after a security incident at analytics provider Amplitude exposed contact details belonging to a small subset of its customers.
In a post on X, Coinbase Support said it found no evidence of unauthorized access to its own systems and that customer funds were not affected. Amplitude’s other customers were also hit. Coinbase said it is notifying affected users and regulators as the law requires, but it did not say how many people were involved or which contact fields were exposed.
Conflicting Figures
The scale remains unclear. 23pds, SlowMist’s chief information security officer, said a leak involving Coinbase was real and that hackers had obtained contact information for more than 70,000 users. The report said it was not yet known whether hackers had taken passwords or funds.
Follow us on X for real-time crypto updates.
Why Contact Data Still Matters
Even without passwords, private keys or funds, stolen emails and phone numbers give scammers material for phishing, impersonation and SIM-swap attempts. The case also shows supply-chain risk, where users can be exposed through a third party even when a company’s own systems hold.
Other Leaks in Asia
Changpeng Zhao, the Binance founder, listed four data leaks reported on Wednesday. They were Coinbase’s alleged vendor exposure, a user data leak at South Korean exchange Bithumb, and leaks at Korean securities firms Mirae Asset and Daishin Securities.
Daishin said hackers stole the names, emails, and mobile numbers of 38,490 customers; Bithumb also reported a leak of personal information after an unauthorized external party accessed its internal mobile groupware system. South Korean regulators have begun inspecting the Mirae Asset breach.
CZ Shares Tips to Protect Crypto Accounts
- Use a separate email alias for each exchange, share only required details, and, if possible, use a dedicated phone number.
- Protect accounts with a unique password, hardware security keys or passkeys, and avoid SMS codes.
- Turn on withdrawal address whitelisting and anti-phishing codes where offered.
- Ask the mobile carrier for a port-out PIN against SIM swaps.
- Treat anyone contacting you about account security or refunds as a scammer, and do not click links in emails or texts.
The reported incidents highlight how third-party vendors can expose customer information even when financial accounts remain secure. While the full scope of the Coinbase incident remains unclear, affected users may face continued phishing and impersonation risks. Investigations into the reported leaks will help establish what data was accessed and whether additional protective measures are needed.
Subscribe to our YouTube channel for the latest crypto news.
Related: Coinbase Sets October 30 Deadline for 14 Stablecoins Under MiCA Rules
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
