If you got a Coinbase data breach email this week, here's what's behind it. Coinbase says it was not hacked: Amplitude, an analytics company it uses, had a security incident that exposed contact details for a small group of Coinbase customers, along with data from Amplitude's other clients. Coinbase says it found no sign of anyone getting into its own systems and that customer funds weren't affected. The real risk is what follows: scammers who now have your email or phone number pretending to be Coinbase.

Key facts

  • Who: Coinbase customers whose contact data sat with analytics vendor Amplitude
  • What: An Amplitude security incident exposed a "small subset" of Coinbase customer contact data, Coinbase says; it says its own systems weren't accessed and funds weren't affected
  • When: Coinbase's statement came on the evening of October 27, 2026; it hasn't said when the incident happened
  • How many: Not disclosed. A figure of 70,000+ spread on X without a named source; Coinbase hasn't confirmed it
  • Source: Decrypt and Unchained, reporting Coinbase's statement

If a Coinbase data breach email lands in your inbox this week, it may be real, and the next message after it may not be. On the evening of October 27, Coinbase's support account put out a short statement: "Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers." It added that it had found no evidence of unauthorized access to Coinbase systems and that customer funds were not impacted, Decrypt reported.

What we know, and what we don't

Amplitude is a company that many apps use to measure how people move through their screens. Coinbase says the problem sat with Amplitude, not with Coinbase itself. That's the whole of the official account so far.

Coinbase hasn't said how many customers are affected, which details were exposed beyond "contact data," or when the incident happened, Unchained noted. Some reports say email addresses and phone numbers; Coinbase's own words don't go that far. Amplitude hasn't named its other affected clients.

You may also see a number: more than 70,000 users. It started with a post on X that didn't name its source, and Coinbase hasn't confirmed it. It also sits very close to the 69,461 accounts in Coinbase's separate 2025 incident, when bribed overseas support staff sold customer data. Until Coinbase gives its own count, treat the figure as unverified.

Why "only contact details" still matters

A name and an email address can't open your account. But they let a scammer write to you as if they know you're a Coinbase customer, because now they do. That's what happened after the 2025 leak, when fake "Coinbase support" callers talked people into moving their coins, and after the old Ledger customer leak, when owners got fake letters about firmware updates years later.

The likely bait looks like this: an email or text saying your account is locked or under review, a link to "verify," or a call from someone who knows your name and says your funds are at risk.

What to do today

  • Don't use links in any Coinbase message. Open the app or type the address yourself, and check for alerts there.
  • Know what support won't ask. Coinbase says its staff never ask for your password or two-step codes, never ask for remote access to your device, and never ask you to send crypto to another address. Anyone who does is not Coinbase. More on fake support scams.
  • Move two-step login off text messages if you can. An authenticator app or a passkey is harder to steal with a SIM swap than an SMS code.
  • Hang up on calls about your account and contact Coinbase through the app instead.
  • If you lost money, report it to the FBI at ic3.gov. Our guide on how to report a crypto scam lists what to save.

Coinbase says it's notifying affected users and regulators. The open questions are the ones it hasn't answered yet: how many people, which details, and since when. We'll update this story when it does.

Sources: Decrypt, Coinbase Customer Data Hit in Analytics Vendor Breach, Funds 'Not Impacted' (October 2026), Unchained, Coinbase Ties Customer Contact Data Exposure to Vendor Amplitude, Says It Was Not Breached (October 2026), Cointelegraph, Coinbase Denies Breach, Says Vendor Exposed Customer Data (October 2026).