Coinbase Global, the largest US-listed cryptocurrency exchange, disclosed a customer data exposure on Wednesday, 28 October 2026, after a security breach at one of its service providers.

The affected vendor is Amplitude, a data analytics platform that companies use to study how customers behave across their digital products. According to the disclosure, contact information for more than 70,000 Coinbase users was exposed in the incident.

The episode illustrates third-party risk: customer data can be affected through vendors and service providers even when the underlying breach occurs outside a company's own infrastructure. Exchanges and consumer technology firms routinely pass user information to analytics tools to measure how products are used, which places a vendor's security practices alongside the platform's own defenses in determining how safely customer data is handled.

Because the exposed material is described as contact information, the practical concern centers on how such details can be used. Security guidance has long treated contact data as raw material for phishing and social-engineering attempts, since it allows messages to be directed at specific individuals and can lend unsolicited communications an appearance of legitimacy. That dynamic applies to any contact-data exposure, regardless of the platform involved.

From here, useful watch items include any further detail from Coinbase or Amplitude on how the breach occurred, which specific data fields were involved, and what notification or remediation steps follow.

This article was first published on COINOTAG: https://en.coinotag.com/coinbase-amplitude-breach-contact-data