Security incident at Amplitude resulted in Coinbase customer contact info leak

Coinbase says a security incident at Amplitude, an analytics vendor, exposed contact information belonging to a small subset of Coinbase customers. The incident also affected customers of other Amplitude clients. Coinbase emphasizes that its own systems were not breached: it says it has found no evidence of unauthorized access to Coinbase infrastructure, and that customer funds were not affected. The information given does not specify which contact details were exposed, how many Coinbase customers were involved, when the incident occurred, or how the attacker gained access.

The central distinction is that customer data was affected through an outside vendor rather than through a breach of Coinbase’s systems. Even so, the exposure involves Coinbase customer information, and the company says it is notifying affected customers and relevant regulatory agencies as required by law. The statement offers reassurance about account security and funds but does not describe any additional protective steps, the scope of the vendor’s incident, or whether other types of customer data were involved.