Reports of a Coinbase hack circulated before the exchange clarified the incident: the breach originated at Amplitude, a third-party analytics provider, and not on Coinbase infrastructure.

The exposed data covers contact information for a "small subset" of Coinbase customers, alongside data belonging to other Amplitude clients. Coinbase says its systems detected no unauthorized access and customer funds remain safe. Affected users are being notified by email, as required by law.

Coinbase has not disclosed how many customers were affected or which contact fields were involved.

The incident highlights supply-chain risk for exchanges. Even without passwords, keys or funds being compromised, leaked emails and phone numbers can be used for phishing and social-engineering attacks against crypto holders.