Coinbase says customer funds are safe after breach at third-party analytics vendor Amplitude

Coinbase has rejected reports that it suffered a hack, stating that customer funds remain safe. The Nasdaq-listed cryptocurrency exchange said the data exposure traced back to Amplitude, a third-party analytics provider, rather than to Coinbase's own infrastructure.

According to a statement from the Coinbase Support account on X, the exposed information is only a "small subset" of contact details. The same incident also involved data tied to other Amplitude clients. Coinbase said it is notifying affected customers by email, as the law requires, and added that its systems have shown no sign of unauthorized access.

The company did not say how many customers were affected, nor did it specify which contact-data fields were exposed. Those gaps leave important questions about the scale of the incident unanswered for now.

The episode highlights the supply-chain risk that companies face when they rely on outside vendors. Customers can be exposed to security problems through a third party even when the core systems of the company they use stay intact. Although passwords, private keys and funds were reportedly not compromised, leaked email addresses and phone numbers can still be used as raw material for phishing and social-engineering attacks.

The disclosure came as several financial firms in South Korea also reported customer-data breaches. Daishin Securities said personal information belonging to 38,490 customers was stolen, including names, email addresses and mobile phone numbers, after the brokerage detected signs of unauthorized access by hackers last week. Separately, Yonhap News Agency reported that some personal information of Bithumb customers was leaked in a cyberattack by an external party. Financial authorities have also begun inspecting the data breach at Mirae Asset Global Investments.