Amplitude Breach Exposes Coinbase Customer Contacts and Transaction Data
SpilloverSpillover from the Amplitude incident · View original incident →Unauthorised access to the internal systems of analytics vendor Amplitude exposed the email addresses, phone numbers and limited transaction data of some Coinbase customers. Coinbase said it has no evidence of an intrusion into its own systems or of any loss of customer funds, and that passwords, private keys and balances were not affected. It did not disclose the number of people affected and denied reports that 70,000 people were affected.
Key facts
- Affected organisation
- Coinbase
- Original incident
- Amplitude Internal System Breach Affects Customer Data
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Contact details and limited transaction data of some customers exposed; number of victims not disclosed
- Cause / method
- Unauthorised access to the internal systems of analytics vendor Amplitude
- Location
- United States
If your data was exposed
Exposed dataPhone numberEmailUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Coinbase said some customers' contact details and limited transaction data were exposed in the Amplitude incident, and denied reports that 70,000 people were affected.
- The exposure of customer contact details through unauthorised access to Amplitude's internal systems became known, and the number of victims was not disclosed.
Original incident
This is spillover from the Amplitude incident.
Amplitude Internal System Breach Affects Customer Data
Impact: Event data of less than 0.3% of all customer accounts
Amplitude detected and blocked unauthorised access to some of its internal systems on 28 September. Event data belonging to less than 0.3% of all customer accounts was affected, and the specific leaked items and number of people have not been disclosed. The company disclosed the incident in a customer security notice on 28 October.
Read on Ally Security ↗
7 related reports
- Coinbase Customer Data Hit in Analytics Vendor Breach, Funds ‘Not Impacted’
- Data breach at Coinbase vendor Amplitude: contact details exposed, balances untouched
- Coinbase says user funds are safe after third-party vendor exposes customer contact info
- Coinbase Hit by Another Data Leak: Are 70,000 Users at Risk?
- Coinbase Says Amplitude Incident Hit Contact and Some Transaction Data, Denies 70K Claim
- Coinbase Data Breach: Exchange Says Its Systems Were Not Compromised After Amplitude Vendor Leak
- Coinbase Vendor Incident Exposes Contact Data, Leaving Scope Unquantified
Other incidents at Coinbase
Coinbase contractor accessed data of about 30 customers without authorisation
30Impact: Information of about 30 customers
Coinbase confirmed that a contract worker had accessed the information of about 30 customers without authorisation. Following the breach, which was linked to leaked screenshots of an internal support tool, the company dismissed the worker, notified affected customers and provided identity theft protection services.
Related reports: 2 · last report →Bribed Coinbase support staff leak data of about 70,000 customers
69.5kImpact: Personal information of 69,461 customers
Attackers bribed Coinbase support staff to steal customers' personal information, including copies of passports, and the number of victims was confirmed at 69,461. The attackers demanded $20 million, but Coinbase refused and instead offered a reward of the same amount for information on the attackers. Coinbase expected the cost of the incident to reach up to $400 million, and in December 2025 a former support agent linked to the case was arrested in India.
Related reports: 43 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.