Coinbase Denies Hack as Third-Party Data Breach Exposes Customer Information

Nasdaq-listed cryptocurrency exchange Coinbase has denied reports of a hack targeting its platform, stating that customer funds remain safe and that its own systems have shown no signs of unauthorized access.

The company said the incident originated at Amplitude, a third-party analytics provider, rather than Coinbase's infrastructure. According to a statement shared by Coinbase Support on X, the exposed information covers a small subset of contact details belonging to Coinbase customers, along with data associated with other Amplitude clients.

Coinbase is contacting affected users by email in line with applicable legal requirements. However, the exchange has not disclosed how many customers were affected or specified which contact details were exposed.

Although the incident has not been linked to compromised customer funds, passwords or private keys, the leaked information could still create security risks. Criminals may use exposed email addresses and phone numbers to launch phishing campaigns, impersonate exchange support staff or attempt other social-engineering attacks designed to gain access to accounts.

The incident also highlights the security challenges associated with third-party service providers. Even when a company's internal systems remain protected, external partners with access to customer-related data can introduce additional risks.

The Coinbase disclosure comes as several financial companies in South Korea have reported separate data-security incidents.

Daishin Securities revealed that personal information belonging to 38,490 customers had been compromised. The exposed details included names, email addresses and mobile phone numbers. The brokerage reportedly identified signs of unauthorized access during the previous week.

Bithumb, another major cryptocurrency platform in South Korea, also suffered a data leak involving some customer information following a cyberattack attributed to an external party, according to local media reports.

Meanwhile, financial authorities have started an inspection into a separate data breach involving Mirae Asset Global Investments.

The incidents have drawn attention to the risks financial and cryptocurrency firms face when handling customer information. While data exposure does not necessarily mean that funds or trading accounts have been compromised, leaked contact details can provide attackers with information they need to target users more effectively.

For Coinbase customers, the exchange's statement indicates that the reported incident was linked to its analytics provider rather than a direct breach of its core systems. The full scope of the exposure, however, remains unclear as the company has yet to release further details about the number of affected users or the specific information involved.