Coinbase denies systems breach, says vendor exposed customer data

Coinbase said that an incident at analytics vendor Amplitude exposed some customers’ contact data, but it found no evidence of unauthorized access to its own systems.

The top 3

  1. Impact of the Third-Party Data Breach: The incident occurred at Amplitude, a third-party analytics provider used by Coinbase, rather than within Coinbase's own infrastructure. This exposure involved a 'small subset' of Coinbase customers' contact information, alongside data from other Amplitude clients, but did not grant unauthorized access to Coinbase’s internal systems or customer funds.
  2. Security Risks and Mitigation: Although assets are secure, the leak of email addresses and phone numbers exposes affected customers to potential phishing and social-engineering attempts. Coinbase is informing impacted users as required by legal standards, highlighting the persistent supply-chain risks where third-party vendors serve as vectors for user-level security threats even when core exchange systems remain protected.

Sources

Open the full topic