Coinbase Says Amplitude Vendor Incident Exposed Customer Contact Data, No Breach of Its Systems

Coinbase has confirmed that a security incident at its analytics vendor, Amplitude, exposed some customers' contact data, but the crypto exchange found no evidence of unauthorized access to its own systems. The disclosure comes after reports of potential data exposure, with Coinbase emphasizing that the issue originated from a third-party service provider rather than a direct breach of its infrastructure. The company stated that the exposed information may include names, email addresses, and IP addresses, but no sensitive financial data such as Social Security numbers, bank account details, or crypto wallet keys were compromised. Coinbase has not specified the number of affected users or the exact timeframe of the exposure, but it is notifying impacted customers and working with Amplitude to investigate the incident. This event highlights the ongoing risks associated with third-party vendors in the financial technology sector, where even well-defended platforms can be vulnerable through their supply chain. For Coinbase users, the incident underscores the importance of vigilance against phishing attempts, as exposed contact details could be used for targeted scams. Coinbase's swift response and transparency may help mitigate reputational damage, but the incident serves as a reminder that data security extends beyond a company's own walls. As the investigation continues, customers should monitor their accounts for suspicious activity and remain cautious of unsolicited communications.