If you have a Coinbase account, be extra careful with any call, text or email about your account over the coming weeks. Coinbase says a security incident at Amplitude, an outside company that measures how people use apps and websites, exposed contact details and some transaction data of a small group of its customers. Coinbase says its own systems were not breached and customers’ money was not affected.1, 2
Reporting checked October 28, 2026.
Too long; didn’t read?
- Coinbase says a “small subset” of customers’ contact data was exposed through its analytics vendor Amplitude, along with data of other Amplitude customers.1
- A spokesperson says limited transaction data was also involved, but not home addresses or anything that would let someone into your account or funds.2
- Coinbase hasn’t said how many people are affected, and calls a circulating figure of more than 70,000 “false”.2
- Affected customers are being notified directly. Expect scam calls and emails that sound like Coinbase.1, 2
What Coinbase says happened
Late on October 27, US time, Coinbase’s support account posted on X: “Coinbase has not had a data breach.” It said Amplitude “experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers”, that it had “found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted”, and that it is notifying affected customers and regulators as the law requires.1
In a statement emailed to the crypto news site Unchained on October 28, a Coinbase spokesperson added that “contact and limited transaction data were impacted” but “not home addresses, or any other information that would allow someone to directly access your account or your funds.”2
Coinbase has not said how many customers are affected, exactly which contact details were exposed, or when the incident happened.1, 2
The “70,000 users” claim
Before Coinbase posted, an account on X claimed, without citing a source, that hackers had contact details for more than 70,000 Coinbase users, and the claim was then repeated by others. Coinbase’s spokesperson told Unchained the claim is “false” and said they believed it confused this incident with Coinbase’s May 2025 breach. Unchained says it could not confirm where the number came from.2
That earlier breach was a different and more serious case: in May 2025, Coinbase said criminals had bribed overseas customer support agents to steal customer data, and a later filing put the number of affected customers at 69,461.1
Why a leaked email address matters for crypto users
Contact details alone can’t open your account. But they tell scammers that you are a Coinbase customer, and with “limited transaction data” they may even know roughly what you’ve done recently. Unchained notes that leaked contact details are a common starting point for phishing.2
The usual script goes like this: a “Coinbase security team” calls or emails to say your account is under attack, then pushes you to “secure” your crypto by moving it to a new wallet, reading out a code, installing a remote-access app, or entering your recovery phrase (the list of words that controls a crypto wallet). Crypto transfers usually can’t be reversed, so once the money moves, it is gone.
What you can do
- Treat unexpected calls as scams. If someone calls saying they’re from Coinbase, hang up. Contact Coinbase only through its app or by typing coinbase.com yourself.
- Never move funds because someone told you to. No genuine support agent needs you to transfer crypto to a “safe” wallet.
- Never share your password, two-step login codes or recovery phrase, and don’t install software at a caller’s request.
- Don’t click links in account emails. Open the app and see whether anything actually needs your attention. Check the full sender address, not just the name shown.
- Use strong login protection. A unique password plus an authenticator app or security key makes stolen contact details far less useful. If you reused your Coinbase password anywhere, change it.
