Coinbase: client data leak occurred at contractor Amplitude, not in exchange systems

Coinbase reported on Wednesday that the contact information of some of its clients was exposed due to an incident at its analytics contractor Amplitude. According to the company's support service on X, the incident affected a "small subset" of Coinbase clients as well as other Amplitude clients. Coinbase denies any breach of its own systems and emphasizes that client funds were not affected.

The disclosure adds to Wednesday's reports of cyberattacks on cryptocurrency exchanges and traditional financial companies. In South Korea, Bithumb is investigating whether a breach of its internal work platform led to a leak of client information: on October 27, the exchange detected abnormal access from outside. Broker Daishin Securities reported a leak of personal and credit data of 38,490 clients. Another affected party was Mirae Asset Global Investments, where, according to the company, hackers only saw the names of some employees.

The Financial Services Commission of South Korea is investigating all three Korean cases and has dispatched a field team to Daishin. This is not the first wave of attacks on the Korean financial sector: similar incidents were previously recorded at Shinhan Bank.

Cointelegraph reached out to Coinbase to find out the number of those affected, but there was no response at the time of publication. The company did not specify how many clients were affected or what categories of data were disclosed.

In May 2025, Coinbase disclosed a separate incident affecting less than 1% of users conducting transactions monthly. At that time, the company estimated the costs for compensation and remediation at up to $400 million.