Coinbase Denies Breach After Amplitude Security Incident Exposes Customer Data

The Nasdaq-listed crypto exchange said a small subset of Coinbase customer information was affected, along with data from other Amplitude customers. Customer funds remain safe according to the company, which confirmed there is no evidence of unauthorized access to its systems.

In its official tweet, Coinbase confirmed that there is no evidence of unauthorized access to its systems and that customer funds remain safe. The exchange did not disclose how many users were affected or which specific contact details were exposed.

We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.

Customer Data Exposure

Exposed email addresses and phone numbers could still put users at risk of phishing and social engineering attacks. SlowMist Chief Information Security Officer, "23pds," claimed that the hackers obtained contact information of more than 70,000 users.

Meanwhile, Amplitude has not yet issued a public statement on how the breach occurred. The incident comes as South Korean financial firms face a series of similar security problems.

Bithumb Security Breach

South Korea's second-largest crypto exchange, Bithumb, has reportedly suffered a data leak after an unauthorized outsider accessed one of its internal workplace tools. According to Yonhap News Agency, Bithumb detected abnormal access to its in-house mobile groupware system on October 27.

Some customer personal data was reportedly leaked the following day. The exchange is still working to determine the full scope of the incident and has not yet confirmed how many customers were affected or which details were exposed.

Trezor Incident

A similar incident happened in September with hardware wallet maker Trezor after a breach involving a third-party provider led to a phishing attempt targeting users. The company warned about a fake email titled "Critical Security Alert: STM32 Entropy Vulnerability" and told users not to click any links.

The message falsely claimed a flaw in STM32 microcontrollers could put wallet recovery phrases at risk, even suggesting 25% of devices might be affected. Trezor said it had taken down the phishing domain and was investigating how attackers accessed its legitimate domain.