Coinbase denies breach, says Amplitude exposed customer data

Coinbase has said that an incident at its analytics provider Amplitude exposed contact data belonging to some of its customers, while stressing that it has found no evidence of unauthorized access to its own systems.

The company's position draws a clear line between a breach of its infrastructure and a failure at a third party. According to Coinbase, the exposure originated with the vendor, not with the exchange's platform. The statement did not frame the episode as a compromise of Coinbase itself.

What was exposed

The data involved is contact information for some customers. Coinbase has not, in the material available, described the exposure as reaching beyond that category, and the number of affected users has not been specified here.

Why it matters

The case is a reminder that a company's security perimeter extends to every service provider that handles its customer data. Analytics tools typically receive information about how people use an app or website, which makes them an attractive and often overlooked link in the chain. Even when an exchange's own systems hold up, a weakness at a vendor can still put users' details in the wrong hands.

For crypto users, contact details can be valuable on their own. Email addresses and phone numbers are commonly used to target people with phishing messages that imitate the platform they use. Customers who receive unexpected messages claiming to come from Coinbase should treat them with caution and avoid following links or sharing credentials or recovery phrases.

What comes next

Coinbase's assessment is that its own systems were not accessed without authorization. Further details, including how many customers are affected and what steps the company and Amplitude take to prevent a repeat, will determine how seriously users and regulators view the incident. Customers who are concerned can review their account security settings and enable the strongest authentication options available.