Coinbase Customer Data Hit in Analytics Vendor Breach, Funds ‘Not Impacted’

In brief

• Coinbase said a security incident at analytics vendor Amplitude affected contact data belonging to a "small subset" of its customers.
• The exchange said it had found no evidence of unauthorized access to its own systems, and that customer funds were not affected.
• The incident comes 17 months after Coinbase disclosed a breach involving bribed overseas support agents.

Coinbase has said a security incident at Amplitude, a third-party analytics provider, affected contact data belonging to a "small subset" of its customers, while stressing that the exchange itself had not been breached.

"Coinbase has not had a data breach," the company's support account said in a tweet on Tuesday night. "Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers."

Coinbase said it had found no evidence of unauthorized access to its systems and that customer funds were “not impacted.” It is notifying affected customers and regulators in line with its legal obligations.

The company did not say how many customers were affected, what kinds of contact data were exposed, or when the incident took place. Nor did it name the other Amplitude customers affected.