Coinbase has officially denied experiencing a data breach within its internal systems. The company clarified that the exposure of customer contact information stemmed from a security incident at Amplitude, a third-party analytics provider.
The incident occurred between October 27 and October 28, 2026. According to Coinbase, the leaked data was limited to email addresses and phone numbers belonging to a small subset of its user base.
The security firm SlowMist estimated that the contact details of over 70,000 Coinbase users may have been accessed. Coinbase confirmed that other Amplitude clients were also affected by the same incident.
The exchange stated that sensitive information, including passwords and transaction histories, remains secure. Coinbase is currently notifying affected customers and has reported the event to regulatory authorities.
Coinbase has issued a warning to users regarding potential phishing and social engineering attempts. The company advises customers to exercise caution with unsolicited communications and to use official channels for account-related inquiries.
