Coinbase’s “small subset” breach exposes the chain reaction nobody wanted 🔗

Customer contact information belonging to a “small subset” of Coinbase users was exposed in a security incident involving analytics provider Amplitude, according to Coinbase, which has not publicly confirmed an exact victim count. Coinbase also said there is no evidence of unauthorized access to customer funds.

The incident creates a potential opening for targeted phishing and social engineering because criminals can use authentic customer details to make fraudulent security alerts, support calls and account-verification requests appear legitimate. A Coin Bureau post on October 28, 2026, reported that hackers had allegedly accessed contact information belonging to more than 70,000 Coinbase users, though the exact number has not been confirmed by Coinbase.

The Amplitude incident followed a separate Coinbase security breach in May 2025, when criminals bribed overseas support personnel to obtain customer information. Coinbase estimated that potential reimbursement and remediation costs could reach up to $400 million.

Both incidents involved different reported methods but affected the same core security concern: access to customer data and the third-party systems that handle it. The Amplitude exposure has renewed scrutiny of how crypto security extends beyond self-custody to include vendor oversight, access controls and fraud-resistant customer verification.