databocor

Coinbase says “no data breach” — but some customers’ contact data was still leaked through its vendor.

Facts: Coinbase Support (X, Oct 28) confirmed a security incident at Amplitude, its analytics vendor, affecting “a small subset” of Coinbase customer contact data — and Amplitude’s other customers were affected too. Coinbase stressed that there is no evidence of unauthorized access to its own systems, and that customer funds were not affected; affected customers and regulators are being notified. According to a spokesperson’s statement to Unchained (Oct 28), the affected data included contact information and a limited amount of transaction data — not home addresses or account access information. Coinbase denied as false the “70,000+ users” claim that had circulated, and did not disclose the exact number.

My take: The distinction “not a Coinbase breach, but a vendor breach” is technically important, but it doesn’t eliminate the risk — leaked email addresses and phone numbers are raw material for phishing and SIM swaps. The precedent is still fresh: the May 2025 incident (in which contractor staff were bribed) affected around 69,000 customers and was followed by a wave of scams. So the threat isn’t direct theft of funds, but fake messages impersonating Coinbase in the coming weeks.

What I’m watching: whether Amplitude discloses the scale and timing, whether reports of phishing impersonating Coinbase increase, and whether other Amplitude clients announce that they were affected.

For BTC holders on any exchange: “verify your account” messages from unknown numbers or email addresses should be treated as scams unless proven otherwise. Have you ever received phishing messages impersonating an exchange after a data incident like this?

This is my analysis, not financial advice — always DYOR.

#KeamananCrypto #DataBocor $BTC