70,000 Coinbase Users May Have Been Accessed

Cryptocurrency exchange Coinbase addressed reports of customer data exposure, stating that it has not experienced a data breach of its own systems. Instead, a security incident at third-party analytics vendor Amplitude impacted contact information for a “small subset” of Coinbase customers, along with data from other Amplitude clients.

In statements posted on its support account on X, Coinbase said: “Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers. We’ve found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted. We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.”

The company has not disclosed the exact number of affected customers, the specific types of contact data involved (reports from outlets such as CryptoBriefing have referenced email addresses and phone numbers), or precise details of the incident timeline beyond indications it occurred around October 27–28. It is contacting impacted users by email as required by law.

Unconfirmed Claims of Scale

Blockchain security firm SlowMist’s researcher (referred to as 23pds) claimed that contact information for more than 70,000 Coinbase users may have been accessed. Multiple outlets reported this figure, but Coinbase has not verified it and continues to describe the impact as limited to a small subset. No evidence has emerged of compromised passwords, private keys, transaction histories, or account balances.