Coinbase Denies System Breach, Points to Analytics Provider Amplitude as Source of User Data Leak
nashnova research
Coinbase confirmed a user data leak originated from third-party analytics vendor Amplitude, not its own systems. The breach exposed a small number of users' contact details, putting supply-chain security risk back in the spotlight for crypto.
What actually happened?
Coinbase stated its own systems showed no unauthorized access; user funds are safe.
The leak traced back to Amplitude, a third-party analytics vendor. This means → the vulnerability sat in Coinbase's external tool chain, not in the exchange's core database.
In plain terms = Coinbase's front door was never forced open, but the outside firm it hired to crunch data let information slip out.
What was exposed, and how big is the damage?
The breach involved contact details for a "small number" of users, plus data belonging to other Amplitude clients.
Coinbase notified affected users by email as required by law, but disclosed neither the exact headcount nor which data fields were involved.
This means → outsiders cannot yet gauge the real scope; the lack of transparency is itself a risk signal.
Why did other firms get hit on the same day?
On the same day, South Korean exchange Bithumb launched a probe into whether its internal work platform was breached, potentially exposing client data.
South Korean brokerage Daishin Securities disclosed that personal and credit data of 38,490 clients had been leaked.
This reflects a broader escalation of cybersecurity pressure across financial institutions — not just crypto, but traditional brokerages too.
What does this mean for ordinary users?
The leaked email addresses and phone numbers do not include passwords, private keys, or funds, but they can serve as raw material for phishing and social-engineering attacks — schemes that impersonate trusted contacts to trick you into clicking a link or giving up credentials.
In plain terms = no money was taken, but scammers now have your contact info and may pose as customer support to fish for your password.
This means → even when an exchange itself is not breached, users still need to stay alert to unsolicited emails and calls.
Is Coinbase's older wound still open?
In May 2025, Coinbase disclosed a separate data breach affecting fewer than 1% of its monthly active trading users.
The company estimated remediation and compensation costs of up to $400 million.
The final scope and potential cost of this Amplitude incident remain officially unstated. This means → two incidents back-to-back are eroding market confidence in Coinbase's data-governance capability.
市场有风险，内容仅供研究参考，不构成投资建议。