Cointelegraph Coinbase Confirms Data Exposure from Third-Party Vendor Amplitude
Article Content
- •Coinbase's systems were not breached; the incident was due to a third-party vendor.
- •Customer email addresses and phone numbers were exposed, raising phishing risks.
- •Coinbase is notifying affected customers but has not disclosed the number impacted.
Coinbase reported a data exposure incident stemming from analytics vendor Amplitude, which affected a small subset of its customers. The exchange clarified that its own systems were not breached and that customer funds remain secure. The exposed data includes customer email addresses and phone numbers, which could lead to phishing attempts. Coinbase is notifying impacted customers as required by law, but did not disclose the exact number of affected users or the specific data fields involved. The incident highlights supply-chain risks associated with third-party vendors. Other crypto exchanges and financial firms are also facing cyberattacks, indicating a broader trend of security vulnerabilities in the sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track Amplitude in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What customer data was exposed?
Are customer funds at risk?
How is Coinbase notifying affected customers?
Continue Reading
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…