Coinbase says customer funds are safe after a third-party vendor exposed customer contact information, denying reports that the exchange itself was hacked. The Nasdaq-listed crypto exchange said the incident originated at Amplitude, a third-party analytics provider, and that its own systems were not breached.
Coinbase (Credits: Shutterstock)
Coinbase Vendor Breach: What Was Exposed?
According to Coinbase, the exposed data includes contact information for a “small subset” of its customers, alongside data related to other Amplitude clients. The company said it is informing impacted customers by email as required by law, while stressing that its systems have not detected any unauthorized access.
Coinbase did not specify how many customers were affected or exactly which contact-data fields were involved, leaving key details unresolved. What the company has made clear, according to CoinDesk’s reporting, is that the breach did not touch its core infrastructure — and customer funds remain safe.
The distinction matters. The incident was not a hack of Coinbase’s exchange systems, but a breach at a vendor that handles analytics data. Coinbase Support’s X handle clarified that the exposed information came through Amplitude, not through any unauthorized access to Coinbase itself.
Coinbase Customers Warned About Phishing Risk
Even with funds untouched, the exposure carries a real risk for affected customers. Contact details such as email addresses or phone numbers can be used in phishing and social-engineering attempts, where attackers impersonate a trusted company to trick people into revealing passwords or codes.
Coinbase is notifying affected customers directly, and the incident serves as a reminder to treat unsolicited messages claiming to be from the exchange with caution — particularly any message urging urgent action or asking for login credentials.
Supply-Chain Risks in Crypto: Why Vendor Breaches Matter
The disclosure underscores a growing supply-chain risk in the crypto industry: customers can face security risks through third parties even when a company’s core infrastructure remains secure. Exchanges rely on a web of analytics providers, support tools, and outside vendors, and a weak link anywhere in that chain can expose user data.
For Coinbase, one of the largest and most scrutinized exchanges in the United States, the incident is likely to renew questions about how crypto platforms vet and monitor their vendors. The company has said its systems were not accessed without authorization — but for customers whose contact details were exposed, the practical concern is what happens next, not where the breach began.
Also Read: South Korea Weighs Fourth Delay on Its Crypto Gains Tax, Pushing It to 2029 and Bitcoin Holds Near $80,000 as Oil Retreats and the Fed Decision Looms
Source: CoinDesk — read the full story there.