On this page · 4 sections ▾
Coinbase said on October 28, 2026 that a security incident at its analytics vendor, Amplitude, exposed a small subset of customer contact data. The exchange denies that its own systems were breached and says customer funds were not affected, according to India Today.
The statement followed a report from SlowMist's 23pds, a blockchain security account, which claimed hackers had obtained contact details for more than 70,000 Coinbase users.
Key facts
- Coinbase says Amplitude, a third-party analytics provider, had the incident, and that other Amplitude customers were also affected.
- Coinbase reports no evidence of unauthorized access to its own systems and says customer funds were not impacted.
- SlowMist's 23pds put the number of exposed users above 70,000. Coinbase has not confirmed a figure.
- Coinbase says it is notifying affected users and is in contact with regulators in line with its legal obligations.
- Amplitude tracks user behavior on a platform, including clicks and engagement patterns.
What is still unclear
Coinbase has not said how many customers were affected, when the Amplitude incident occurred or who was behind it, per India Today. The gap between the 70,000-plus figure in the security firm's report and Coinbase's description of a "small subset" has not been resolved in the available coverage.
The distinction Coinbase draws is a narrow one. Contact data held by a vendor is not the same as access to exchange infrastructure or wallets. Even so, exposed contact details can be used to target users, and the company's notifications to affected customers are the main source of detail so far.
Part of a wider run of incidents
Coinbase is not the only exchange in the news. Gadgets 360 reports that Bithumb, Mirae Asset Global Investments and Daishin Securities have also disclosed data security incidents involving customer information or internal business systems.
According to that report, Bithumb described unauthorized access to an internal employee communication application. Daishin Securities disclosed a breach affecting 38,490 customers. The incidents have led to reports to relevant authorities and investigations into the affected systems. The summary available does not detail what happened at Mirae Asset.
India Today also recalls an earlier Coinbase incident in May 2025, when the company said criminals bribed overseas support agents to copy customer records. Those records included names, phone numbers, government ID images and transaction histories, and the incident affected over 69,000 users. The latest case differs in that the exposure sits with a vendor, not with Coinbase staff.
What to watch next
The key open items are a confirmed count of affected Coinbase users and the timeline of the Amplitude incident. Amplitude's own disclosure to its other customers would show how far the problem reaches.
