Amplitude Data Breach Impacts Coinbase Customers

A security incident at analytics provider Amplitude has resulted in the exposure of contact information for Coinbase users.

Updated on Oct. 28, 2026 in Cybersecurity

Isometric editorial illustration of metallic server cabinets in deep teal and oxblood, symbolizing digital infrastructure and data security. — A data breach at analytics firm Amplitude has exposed the contact information of some Coinbase users, though the exchange's internal systems remain secure. AI Illustration. Upload story photo >

Live Poll

Do you trust the third-party services you use to keep your personal contact information secure?

Analytics provider Amplitude recently suffered a security breach that exposed contact information for a subset of Coinbase customers. Coinbase confirmed that its own internal systems were not compromised and that all user funds remain secure.

Why it matters

The breach highlights the risks associated with third-party data reliance, where vulnerabilities at an external service provider can impact the privacy of a client's customer base. Despite the exposure, the incident underscores the distinction between the analytics firm's security failure and the integrity of the crypto exchange's platform.

The incident occurred within the infrastructure of Amplitude, an analytics provider used by the exchange, rather than on Coinbase systems. This data exposure follows a 2025 breach involving another service provider, TaskUs, which compromised 69,461 accounts.

The players

Coinbase

Coinbase is a large cryptocurrency exchange platform that provides services for buying, selling, and storing digital assets.

Amplitude

Amplitude is a digital analytics provider that assists companies in tracking user behavior and interactions across their digital products.

TaskUs

TaskUs is an outsourced service provider that manages various business operations, including customer support and data handling.

The details

Coinbase is currently notifying affected customers via email to inform them of the exposure of their contact details. The company emphasized that the breach was limited to the analytics provider and did not involve unauthorized access to any user accounts or digital assets.

A separate security incident involving service provider TaskUs occurred in 2025.
Coinbase reported the Amplitude security incident on October 27, 2026.

The Tech Race

This breach reflects the ongoing challenge of managing third-party risks in a digital ecosystem where data is shared across multiple analytics and service platforms. The incident demonstrates how reliance on external providers like Amplitude can create new vulnerabilities even when primary systems remain secure.

Users should remain vigilant against potential phishing attempts, as their contact information may have been compromised in the incident. Affected individuals should monitor their accounts for suspicious emails or messages while Coinbase continues to manage the fallout from the analytics provider breach.

The takeaway

Securing data against third-party breaches requires users to be cautious of communications that reference their account information. Companies and customers alike must remain aware that security extends beyond an primary platform's firewall to include all integrated analytics providers.