INTEL: Coinbase blames vendor Amplitude after contact details of over 70,000 users leak

Coinbase says a security incident at its analytics provider Amplitude exposed some of its customers’ contact data, after blockchain security firm SlowMist said the leak was real and covered more than 70,000 users. Coinbase says its own systems were not breached and customer funds were not affected.

On October 28, SlowMist chief information security officer 23pds said the Coinbase data leak was confirmed and that hackers had obtained contact information for more than 70,000 users. He said it had not been confirmed whether passwords or funds were stolen. One report says 23pds was relaying a claim first made by a crypto influencer on X, so the origin of the 70,000 figure is not fully clear.

Coinbase’s response

Coinbase disputed the description of the event as a data breach. It said Amplitude suffered a security incident that affected some Coinbase customer contact data, as well as data belonging to other Amplitude customers. The company said it has found no evidence of unauthorized access to its own systems and that customer funds were not affected.

Coinbase said it will notify affected customers and regulators in line with its legal obligations. In the material available, it did not confirm the number of users affected or say what kinds of contact details were exposed.

The two accounts differ mainly in framing. SlowMist describes a leak of Coinbase user data, while Coinbase places the incident at a third-party vendor and says its own infrastructure was not compromised. Whether passwords were taken remains unconfirmed.