Back Finance.Yahoo

Coinbase Hit by Another Data Leak: Are 70,000 Users at Risk?

Finance.Yahoo • October 28, 2026

Coinbase says the Amplitude leak did not compromise its systems or customer funds.

The company claims that the leak affected 70,000 users, but this remains unconfirmed.

However, exposed details could fuel phishing and impersonation scams.

Coinbase has acknowledged that a security incident at analytics provider Amplitude affected some customers' information, raising fresh concerns privacy and phishing risks at the cryptocurrency exchange.

However, Coinbase denies that attackers breached its own systems and says customer funds remain unaffected. Claims that the exposure involves more than 70,000 users remain unconfirmed by the company.

The distinction matters: while the incident does not establish that attackers accessed Coinbase accounts , the exposure of details could give scammers another route to target customers.

What Happened at Coinbase's Analytics Vendor?

"Coinbase has not had a data breach," the company's support account said on X, identifying Amplitude as the source of the incident.

According to Coinbase, the analytics vendor experienced a security incident that affected a small subset of Coinbase customers' data , as well as information belonging to other Amplitude customers.

The exchange said it found no evidence of unauthorized access to its systems and was notifying affected customers and regulatory agencies.

The statement did not identify the exact number of affected users, specify which fields the incident exposed, or explain how attackers accessed the information.

The claim involving more than 70,000 users circulated separately. CoinNess reported that SlowMist Chief Information Security Officer 23pds shared the figure, citing crypto influencer DelCrxpto. That attribution does not amount to independent verification, and Coinbase has not endorsed the estimate.

For now, the confirmed exposure concerns customer data. Broader claims stolen credentials or compromised accounts go beyond what Coinbase disclosed.

Why Data Can Still Put Customers at Risk

Binance co-founder Changpeng Zhao highlighted the Coinbase incident in a post discussing reported leaks involving Bithumb and South Korean securities firms Mirae Asset and Daishin Securities.

CZ warned that criminals can exploit leaked exchange data for phishing, SIM swapping and social engineering. His list described potential consequences of financial-data leaks generally; it did not establish that the Amplitude incident exposed identity documents, addresses or transaction histories.

information alone can nevertheless make impersonation attempts more convincing. A message that identifies its recipient as a Coinbase customer may appear credible, particularly when it references a genuine security incident.

Attackers could exploit that credibility through fake breach notifications , account-verification requests, or instructions to move cryptocurrency to a supposedly secure wallet.

Coinbase's published security guidance says its staff will never request passwords or two-factor authentication codes, or instruct customers by phone or text to transfer funds to a specific destination.

Those rules offer customers a practical way to identify fraudulent approaches.

Zhao also recommended unique passwords, hardware security keys or passkeys, and avoiding SMS authentication where possible.

Coinbase's Earlier Breach Shows the Stakes

The latest disclosure follows a separate incident that Coinbase announced in May 2025. Then, criminals bribed overseas support personnel to obtain customer information.

That earlier theft involved names, details, government identification images, balance snapshots, and transaction histories.

Coinbase said the attackers intended to impersonate its staff and persuade customers to hand over cryptocurrency. The company rejected a $20 million ransom demand and instead announced a reward fund of the same size.

Initially, Coinbase estimated that remediation and voluntary customer reimbursements could cost between $180 million and $400 million. That historical estimate pertained to the 2025 incident rather than the newly disclosed Amplitude exposure.

The earlier case illustrates why customer data security matters even when attackers cannot directly access wallets.

For the Amplitude incident, unanswered questions include the verified customer count, the precise information affected, and the timeline. Until Coinbase provides those details, 70,000 remains an unconfirmed claim, while the company maintains that customer funds were unaffected.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coinbase Confirms Data Exposure from Third-Party Vendor Amplitude Coinbase reported a data exposure incident stemming from analytics vendor Amplitude, which affected a small subset of its customers. The exchange clarified that its own systems were not breached and that customer funds remain secure. The exposed data includes customer email addresses and phone numbers, which could lead to phishing attempts. Coinbase is notifying impacted customers as required by law, but did not disclose the exact number of affected users or the specific data fields involved. The incident highlights supply-chain risks associated with third-party vendors. Other crypto exchanges and financial firms are also facing cyberattacks, indicating a broader trend of security vulnerabilities in the sector. 3 sources 27

Coinbase Hit by Another Data Leak: Are 70,000 Users at Risk?

The full story

Extracted Entities

Attack Types (1)

Companies (2)