Key Takeaways
- • Coinbase says customer funds remain safe and its own systems were not accessed without authorization, after reports claimed it had been hacked.
- • The data exposure originated at Amplitude, a third-party analytics provider, and affected contact information for a "small subset" of Coinbase customers along with data of other Amplitude clients.
- • Coinbase is notifying affected customers by email as required by law, warning that exposed emails and phone numbers could fuel phishing and social-engineering attempts.
- • Coinbase has not disclosed how many customers were affected or which contact-data fields were involved.
- • The incident coincides with several South Korean financial firms disclosing customer-data breaches, including Daishin Securities (38,490 customers).
Summary
Nasdaq-listed cryptocurrency exchange Coinbase has denied reports that it was hacked, stating that its systems were not accessed without authorization and that customer funds remain safe. According to a statement posted by Coinbase Support on X, the incident originated at Amplitude, a third-party analytics provider, rather than at the exchange itself. The exposed data includes a "small subset" of customer contact information, along with data related to other Amplitude clients.
Coinbase said it is informing affected customers by email as required by law, while stressing that its systems have not detected any unauthorized access. The company did not specify how many customers were affected or exactly which contact-data fields were involved, leaving key details unresolved. CoinDesk reached out to Coinbase for comment.
The disclosure highlights supply-chain risk: customers can face security threats through third parties even when a firm's core infrastructure remains secure. While passwords, private keys and funds were not reported as compromised, exposed email addresses and phone numbers can still be used in phishing and social-engineering attacks, according to the reporting.
The incident comes as several financial firms in South Korea have also disclosed customer-data breaches. Daishin Securities said personal information belonging to 38,490 customers, including names, email addresses and mobile phone numbers, was hacked after the brokerage detected signs of unauthorized access by hackers the previous week. Per Yonhap News Agency, some personal information of Bithumb customers was leaked in a cyberattack by an external party. Financial authorities have also begun an inspection into the data breach at Mirae Asset Global Investments.
Coinbase said it is informing affected customers by email as required by law, while stressing that its systems have not detected any unauthorized access. The company did not specify how many customers were affected or exactly which contact-data fields were involved, leaving key details unresolved. CoinDesk reached out to Coinbase for comment.
The disclosure highlights supply-chain risk: customers can face security threats through third parties even when a firm's core infrastructure remains secure. While passwords, private keys and funds were not reported as compromised, exposed email addresses and phone numbers can still be used in phishing and social-engineering attacks, according to the reporting.
The incident comes as several financial firms in South Korea have also disclosed customer-data breaches. Daishin Securities said personal information belonging to 38,490 customers, including names, email addresses and mobile phone numbers, was hacked after the brokerage detected signs of unauthorized access by hackers the previous week. Per Yonhap News Agency, some personal information of Bithumb customers was leaked in a cyberattack by an external party. Financial authorities have also begun an inspection into the data breach at Mirae Asset Global Investments.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.