Loading prices…
🩸BEARISH

Coinbase User Data Exposed in Amplitude Security Breach

The incident puts third-party analytics controls under scrutiny, while Coinbase says internal systems and customer funds were not affected.

Coinbase User Data Exposed in Amplitude Security Breach
Coinbase User Data Exposed in Amplitude Security Breach

Amplitude, a third-party analytics vendor used by Coinbase, suffered a security incident that exposed contact information linked to more than 70,000 users across affected clients. Coinbase said its own systems were not breached and found no evidence of unauthorized internal access.

Why it matters

Coinbase said the exposure was limited to contact details for a small subset of its users. The incident highlights the privacy and compliance risks created when analytics vendors handle customer-related data outside a platform's core systems.

Market impact

Coinbase said passwords and customer funds were not affected, and that it is notifying affected users and relevant regulators as required. The event is therefore primarily a third-party privacy and compliance issue, rather than a reported loss of customer assets.

Frequently asked questions

  1. What information was exposed in the Amplitude incident?

    The incident exposed contact information. Coinbase said the affected data involved contact details for a small subset of its users.

  2. How many users were affected by the security incident?

    The hacker obtained contact information for more than 70,000 users across Amplitude's affected clients.

  3. Did Coinbase's internal systems suffer a breach?

    No. Coinbase said it did not experience an internal data breach and found no evidence of unauthorized access to its systems.

  4. Were Coinbase customer funds or passwords compromised?

    Coinbase said customer funds remain entirely unaffected. The incident reporting did not establish that passwords or funds were compromised.

  5. What is Coinbase doing after the incident?

    Coinbase said it is notifying affected users and relevant regulatory authorities in accordance with legal requirements.

Source attribution
Aggregated from WuBlockchain · Verified · Last refreshed 2h ago
Open original →