An external security incident at analytics provider Amplitude leaks limited customer contact information, while core exchange systems remain entirely unaffected. The security incident originated from third-party analytics provider Amplitude rather than a direct breach of Coinbase’s internal systems or infrastructure. The exposed data is restricted to a small subset of customer contact details, specifically email addresses and phone numbers. Coinbase explicitly confirmed that user passwords, private keys, transaction histories, and account balances remain completely safe and untouched. The exchange has begun issuing direct email notifications to all impacted users while notifying relevant regulatory agencies.

Full report : Coinbase Confirms Customer Funds Are Safe Following Third-Party Vendor Data Exposure.