Amplitude analytics security incident exposes Coinbase customer contact data
Amplitude product analytics (customer data of Coinbase and other Amplitude clients)
Coinbase said on Oct 28 2026 that it was not breached itself, but that its product analytics vendor Amplitude had a security incident which exposed contact data for a small subset of Coinbase customers, as well as data belonging to other Amplitude customers. Coinbase says it found no evidence of unauthorized access to its own systems, customer funds are not affected, and it will notify affected customers and regulators as required. The claim of more than 70,000 affected users circulating on X has not been confirmed by Coinbase or Amplitude.
Why this severity: Contact data only according to Coinbase, but crypto exchange customer lists are prime material for targeted phishing and impersonation scams; other Amplitude customers are affected too
- Started
- Oct 28, 2026
Affected
Not published yet
Fixed in
No fixed release yet
Timeline2
Coinbase says it was not breached: its analytics vendor Amplitude had a security incident that exposed contact data for a small subset of Coinbase customers, along with data of other Amplitude customers. Coinbase found no unauthorized access to its own systems and says funds are not affected.
Posts on X claim Coinbase suffered a data breach exposing contact details of more than 70,000 users.
Advisories1
News & write-ups2
Notes & caveats
Amplitude has not published its own statement yet, and the number of affected Coinbase customers and other Amplitude clients is not known. Separately, SpotAngels disclosed on Oct 8 2026 that stolen SpotAngels account credentials were used Sept 5 to 13 to export its data stored in Amplitude, and said Amplitude's platform was not compromised in that case; whether that is related is unknown.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
