Breach · · 3 min read
Coinbase says some customer contact details leaked through analytics vendor Amplitude
Coinbase says a security incident at Amplitude, an analytics company it uses, exposed contact data for a small subset of its customers. Funds weren’t affected.
Coinbase, the crypto exchange, says contact details for some of its customers were exposed in a security incident at Amplitude, an analytics company that many apps use to see how people move through them. Coinbase says its own systems weren’t broken into and that no funds were touched. If you use Coinbase, here’s what is known so far and what to watch for.
What happened
Late on October 27, 2026, after posts online claimed Coinbase had been hacked, its support account said: “Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers,” as quoted by Decrypt.
Coinbase says it found no evidence of unauthorized access to its own systems, that customer funds were not affected, and that it is notifying affected customers by email and informing regulators, CoinDesk reported.
A lot is still unknown. Coinbase hasn’t said how many customers were affected, exactly which contact details were involved, or when the incident happened. Amplitude’s other affected customers haven’t been named. Numbers circulating on social media haven’t been confirmed by either company, so we’re leaving them out.
What this means for you
Contact details on their own can’t move your money. The risk is what scammers do with them: an email, text or call that looks like it comes from Coinbase, often claiming your account is at risk and pushing you to act fast. People known to hold crypto are a favourite target for this.
It’s also a reminder that the apps you use share data with other companies behind the scenes, and a leak at one of them can reach you even when the app itself wasn’t hacked.
What you can do
- Be suspicious of any “Coinbase” call or text. Coinbase says it is contacting affected customers by email. Hang up on calls and open the app yourself instead.
- Never move funds to a “safe” or “new” wallet because a message or caller told you to. That request is the scam.
- Never share your password, 2-step codes or recovery phrase with anyone, including someone who says they’re from support.
- Use a passkey or security key for your Coinbase sign-in if you can, so a phished password isn’t enough.
- Learn the patterns. See how scammers use leaked data.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. Frame’s email aliases also let you give each financial app its own address, which makes a message to the wrong address an easy sign of a fake. Frame never collects or stores the leaked records themselves.
Sources
- Decrypt, Coinbase Customer Data Hit in Analytics Vendor Breach, Funds ‘Not Impacted’, October 28, 2026
- CoinDesk, Coinbase says user funds are safe after vendor exposes customer data, October 27, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.