Coinbase Denies Breach After Amplitude Security Incident Exposes Customer Data

Coinbase has denied reports of a data breach after a security incident at the third-party analytics vendor Amplitude exposed some customer contact data.

The Nasdaq-listed crypto exchange said a small subset of Coinbase customer information was affected, along with data from other Amplitude customers.

Customer Data Exposure

In its official tweet, Coinbase confirmed that there is no evidence of unauthorized access to its systems and that customer funds remain safe. The exchange did not disclose how many users were affected or which specific contact details were exposed. However, exposed email addresses and phone numbers could still put users at risk of phishing and social engineering attacks.

“We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.”

Meanwhile, Amplitude has not yet issued a public statement on how the breach occurred. SlowMist Chief Information Security Officer, “23pds,” claimed that the hackers obtained contact information of more than 70,000 users.

Coinbase is not the only one facing questions over customer data security. South Korea’s second-largest crypto exchange, Bithumb, has reportedly suffered a data leak after an unauthorized outsider accessed one of its internal workplace tools.

According to Yonhap News Agency, Bithumb detected abnormal access to its in-house mobile groupware system on October 27. Some customer personal data was reportedly leaked the following day. The exchange is still working to determine the full scope of the incident. It has not yet confirmed how many customers were affected or which details were exposed.

The incident comes as South Korean financial firms face a series of similar security problems. Daishin Securities reported that information belonging to more than 38,000 customers was leaked. The exposed data reportedly included names, email addresses, and phone numbers. Mirae Asset Global Investment was also affected.

Trezor Incident

A similar incident happened in September with hardware wallet maker Trezor after a breach involving a third-party provider led to a phishing attempt targeting users. The company warned about a fake email titled “Critical Security Alert: STM32 Entropy Vulnerability” and told users not to click any links. The message falsely claimed a flaw in STM32 microcontrollers could put wallet recovery phrases at risk, even suggesting 25% of devices might be affected.

Trezor said it had taken down the phishing domain and was investigating how attackers accessed its legitimate domain.

The post Coinbase Denies Breach After Amplitude Security Incident Exposes Customer Data appeared first on CryptoPotato.