Coinbase said a security incident at analytics provider Amplitude exposed contact details for a small share of its customers. According to the company, there was no unauthorised access to its own systems and customer funds are safe. Coinbase is notifying affected users and the relevant authorities. It has not given the number of customers or the exact fields exposed, and figures circulating in media reports have not been confirmed.

What it means: Even when no funds are lost, a leak of a crypto exchange's customer contact details is serious, because it gives fraudsters exactly what they need: a list of people known to hold crypto accounts, together with an email or phone number. The attacks that follow are usually calls from supposed customer support asking people to move funds to a safe wallet, or messages with fake login pages. Coinbase already dealt with a major leak through outside contractors in 2025, so the issue of third-party providers remains sensitive. For users in Greece with a Coinbase account, the practical message is to treat with suspicion any call or message claiming to be from the company, never to move funds at a support request, and to use security keys or an authenticator app instead of SMS. For businesses in general, the incident is a reminder that user behaviour analytics tools often receive more data than they need. It is worth checking what third-party SDKs send, removing or pseudonymising contact details and having a GDPR processing agreement with every such provider.

Read the original on CoinDesk

Related service: Custom software

Related stories