Coinbase said a security incident at third-party analytics provider Amplitude exposed contact information belonging to a limited portion of its customers. The company stressed that its own systems were not compromised and that customer funds stayed unaffected.

In a statement posted by its official support account, Coinbase declared it had not experienced a data breach. The exposure originated with Amplitude and also touched data from other clients of the analytics firm. Coinbase reported finding no signs of unauthorized entry into its infrastructure.

Scope of the Exposure Remains Limited

Coinbase described the affected group as a small subset of customers but declined to release an exact figure or specify the precise contact fields involved. Online claims circulating on social media suggested more than 70,000 users might have been impacted. The exchange did not confirm that number.

The company is contacting affected individuals and informing relevant regulatory bodies as required by law. No details have been provided on the timing of the Amplitude incident or the identities of other affected Amplitude clients.

Phishing Risks Persist Despite Intact Funds

While private keys, account credentials, and balances were not compromised, the release of contact details such as names and email addresses can enable targeted social engineering. Scammers frequently exploit such information to craft convincing messages that appear to come from legitimate support teams, urging recipients to click malicious links or share sensitive details.

Coinbase has previously published guidance advising users to treat unexpected communications with caution, even when they contain seemingly authentic personal information, and to access accounts only through official channels.

Context of Prior Third-Party Incidents

The latest disclosure follows a more extensive event in May 2025, when criminals bribed overseas customer support personnel to obtain personal data from fewer than 1 percent of monthly transacting users. A subsequent filing indicated 69,461 customers were affected, with information including names, addresses, masked Social Security numbers, and government identification images exposed. Coinbase rejected a $20 million ransom demand and estimated potential reimbursement and remediation expenses could reach as high as $400 million.

Both episodes illustrate the operational challenges that arise when sensitive customer information moves through external service providers. Similar vendor-related exposures have affected other crypto firms, including hardware wallet makers that saw shipping partners leak buyer records.

Amplitude itself had not issued a public statement on the matter at the time of Coinbase’s disclosure. The exchange continues to review the incident while proceeding with customer and regulatory notifications.