Coinbase says a security incident at analytics vendor Amplitude affected contact data of a small subset of Coinbase customers; it found no evidence of unauthorised access to Coinbase systems
Coinbase said in a post on its Coinbase Support account on X at 10:49 am Perth time (AWST) on 28 October 2026 (02:49 UTC): 'Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers.'
In the same post Coinbase said it had found no evidence of unauthorized access to Coinbase systems, that customer funds were not impacted, and that it is notifying impacted customers and regulatory agencies in accordance with its legal obligations. (source: Coinbase Support on X)
Decrypt (28 Oct) reports that Coinbase did not say how many customers were affected, what kinds of contact data were exposed or when the incident took place, and did not name the other Amplitude customers affected. (source: Decrypt)
Correction (29 Oct 2026): the post's time is now given in Perth time from the post's own timestamp, each statement is credited to the post or to Decrypt, and wording not in either source was removed. (source: Coinbase Support on X)
- Product
- Amplitude (analytics vendor to Coinbase)
- Versions
- n/a — third-party data incident
- Exploited in Australia?
- unknown
- Patch to
- Coinbase customers: expect phishing that uses leaked contact details; Coinbase says it is notifying impacted customers. Organisations using Amplitude: check for vendor notices and review what customer data you send to analytics tools.