Coinbase Says Amplitude Incident Exposed Some Customer Contact Data

Coinbase said Tuesday that a security incident at analytics provider Amplitude exposed contact information for a small subset of the exchange’s customers, while the company found no evidence of unauthorized access to its own systems.

Coinbase said customer funds were safe and that it is notifying affected users by email. It did not disclose how many of its customers were affected or identify the contact fields involved. Amplitude’s incident also involved data from other customers of the analytics provider, extending the exposure beyond Coinbase.

Coinbase previously disclosed a separate 2025 incident involving its outsourced customer-service provider, TaskUs. The company said insiders there were bribed to sell customer data to hackers; 69,461 user accounts were affected. Coinbase rejected a ransom demand and estimated reimbursement and remediation costs could reach $400 million. The two incidents involved separate outside providers: TaskUs handled customer service, while Amplitude provided analytics services.