Coinbase Customer Data Exposed in Amplitude Security Breach
The exchange reports that customer funds are safe after a security incident occurred within a third-party analytics vendor.
Updated on Oct. 28, 2026 in Cybersecurity
Live Poll
Do you trust the third-party services you use to keep your personal contact information secure?
Analytics firm Amplitude experienced a security incident that exposed contact information for a subset of Coinbase customers. Coinbase confirmed that its own systems were not compromised during the breach and that customer funds remain secure.
Why it matters
The incident highlights the ongoing risk of third-party supply chain vulnerabilities, where external service providers become vectors for data exposure. It follows a pattern of high-stakes security incidents involving Coinbase's vendors, including a separate 2025 breach involving TaskUs.
While the scale of the Amplitude exposure is unknown, a 2025 security event involving service provider TaskUs affected 69,461 user accounts. Coinbase estimated the remediation and reimbursement costs for that prior incident could reach $400 million.
The players
Coinbase
A major cryptocurrency exchange that utilizes various third-party analytics and support service providers.
Amplitude
A digital analytics platform that provides tracking and data processing services for its enterprise clients.
TaskUs
An outsourced service provider that previously handled customer support operations for the exchange.
The details
The breach occurred within the systems of Amplitude, an analytics provider used by the exchange to process customer data. Coinbase stated that it is in the process of notifying affected users via email, though it did not specify which contact data points were accessible. Unlike a 2025 incident involving TaskUs, where insiders were bribed to sell data, no unauthorized access to internal Coinbase infrastructure has been reported.
Timeline
2025: A separate security incident occurred involving service provider TaskUs.
October 27, 2026: Coinbase reported the current security incident involving Amplitude.
The Tech Race
This event mirrors the 2025 TaskUs security incident, which forced a significant reassessment of vendor security standards. It reinforces a trend where large platforms face exposure primarily through the supply chain rather than direct system compromise.
Coinbase customers who are affected by this incident will receive direct notification via email regarding their contact information. No action is required to secure funds or accounts, as the company maintains that its own internal systems remain unaffected.
The takeaway
Third-party analytics dependencies remain a recurring vulnerability for major financial platforms. Users should remain vigilant for phishing attempts using the exposed contact details, as vendors may not disclose the full extent of the compromised data fields.
Further reading
For broader trends in vendor-related risks, see our coverage of Cybersecurity.
Live Poll
Do you trust the third-party services you use to keep your personal contact information secure?
