Coinbase said an incident at its analytics provider, Amplitude, exposed contact information for a small subset of its customers, while data belonging to other Amplitude clients was also affected.
In an Oct. 28 post on X, Coinbase Support said the company found no evidence that its own systems were accessed without authorization. Coinbase said no customer funds were affected and that it was notifying affected customers and regulatory agencies under its legal obligations.
The company did not say how many customers were involved, identify the exposed contact details or give a date for the Amplitude incident.
An X account called 23pds claimed at 02:17 UTC on Oct. 28 that contact information for more than 70,000 users had been obtained. That figure is unverified, and Coinbase did not confirm it or provide its own count.
Amplitude’s public status page showed its services as operational on Oct. 28 and listed no notice of the incident.
