Coinbase: Amplitude Breach Exposed Customer Contact Data

Coinbase announced that a security incident at analytics vendor Amplitude resulted in the exposure of contact data for a small subset of its customers. The company clarified that this incident also impacted other Amplitude clients. Coinbase stated that it found no evidence of unauthorized access to its own systems and denied that its infrastructure was breached. The company further confirmed that customer funds were not affected by the event.

Coinbase is notifying affected customers and regulators in line with its legal obligations. The company did not disclose the specific number of customers impacted, the types of contact data exposed, or the timing of the incident. Coinbase Support noted on X that the situation involved a small subset of users alongside other Amplitude clients.

Coinbase estimated remediation costs for the May 2025 breach at up to $400 million.