Coinbase denies internal breach, blames vendor for data exposure
- Coinbase reported a security incident at its analytics vendor, Amplitude.
- The exchange stated that no unauthorized access occurred within its own internal systems.
- Coinbase confirmed that customer funds remain safe and were not affected.
- Reports from third-party sources suggest up to 70,000 users may be at risk.
- Coinbase is currently notifying regulators and affected customers about the incident.
Coinbase announced on Tuesday, October 28, 2026, that it experienced no internal security breach, instead attributing the exposure of a small subset of customer contact data to a security incident at its analytics vendor, Amplitude. The company confirmed that its own internal systems were not breached and that customer funds were "not impacted".
On Tuesday night, the Coinbase support account posted on X: "Coinbase has not had a data breach," adding that "Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers". Coinbase Support further noted that the incident affected a small subset of its customers as well as other clients of the analytics firm.
Regarding wider industry trends, Robinhood announced $1.42 billion in third-quarter revenue, falling short of the $1.43 billion Wall Street had anticipated. The company posted earnings of $0.51 per share, which fell below the $0.55 analysts had projected and represented a decline from $0.61 a year ago, even as it sustained 28.6 million funded customers.
In other news, Ripple's RLUSD stablecoin launched Tuesday on Robinhood’s blockchain and its Bitstamp exchange, with intentions to arrive on the primary Robinhood app before the year ends. Anchorage Digital also expanded its custody-and-listing arrangement with Bitso to hold stablecoins moving between the U.S. and Mexico, including Bitso's MXNB stablecoin across six blockchains.
Customer funds remain secure
Coinbase confirmed on 28 October 2026 that customer funds remain safe and were not impacted by the incident. User assets were not affected by the security breach.
Discrepancies in affected user numbers
There is no official confirmation regarding the number of users affected by the incident. Cointelegraph requested the number of affected customers from Coinbase on 28 October 2026 but did not receive a response.
CCN.com reported that 70,000 users may be at risk due to the data leak. FinanceFeeds reported that SlowMist flagged data belonging to 70,000 users in relation to the breach. TronWeekly reported that Coinbase has denied a massive leak of 70,000 contacts.
Coinbase did not disclose the specific number of affected customers, the nature of the exposed contact data, the timing of the incident, or the names of other Amplitude customers affected.
Regulatory notifications and next steps
Coinbase is currently notifying regulators and affected customers about the Amplitude incident. This action is being taken to comply with the company's legal obligations.
Historical context of May 2025 Coinbase breach
Coinbase revealed a distinct data breach in May 2025 that affected under 1% of its monthly transacting users. Cybercriminals bribed overseas support agents to steal personal data during this incident.
A filing with the Maine attorney general confirmed 69,461 customers were affected.
Coinbase estimated the reimbursement and remediation costs for this breach at up to $400 million. During the incident, the company refused a $20 million ransom demand. Coinbase chose instead to provide a $20 million bounty for details that could result in the capture of the attackers.
Recent security incidents across the crypto sector
Other security incidents have impacted the broader sector recently. Bithumb in South Korea stated on 28 October 2026 that it is looking into whether a compromise of its internal work platform leaked customer data.
Simultaneously, brokerage firm Daishin Securities announced that personal and credit details of 38,490 customers had been leaked. Hardware wallet manufacturer Trezor announced in September 2026 that a security incident at its shipping partner, ShipMonk, led to the exposure of names, phone numbers, and home addresses for 67,000 U.S. customers.
Trezor had previously disclosed a separate breach in August 2026 involving nearly 14,000 customers.
Frequently Asked Questions
- Coinbase denies systems breach, says vendor exposed customer data (cointelegraph.com)
- Coinbase Customer Data Hit in Analytics Vendor Breach, Funds ‘Not Impacted’ (decrypt.co)
- Coinbase (Wikipedia — background) (en.wikipedia.org)
Add NewsPulse Time as a preferred source on Google