Although assets are secure, the leak of email addresses and phone numbers exposes affected customers to potential phishing and social-engineering attempts. Coinbase is informing impacted users as required by legal standards, highlighting the persistent supply-chain risks where third-party vendors serve as vectors for user-level security threats even when core exchange systems remain protected.