Coinbase was not hacked. But a vendor it works with leaked contact details for some of its customers, and that gap is the whole story. No money was taken, yet the leak still matters, because an email address or a phone number in the wrong hands is often the first step in a scam.
Key points:
- A leak at analytics firm Amplitude, not at Coinbase itself, exposed contact details for a small slice of Coinbase customers.
- Coinbase says its own systems were never touched, and no customer money is at risk.
- The catch is what comes next: leaked emails and phone numbers give scammers fresh material for phishing, and Coinbase still has not said how many people were hit.
Coinbase said the leak came from Amplitude, a firm that helps it study how people use its app. A small slice of Coinbase customers were caught in it, along with customers of other firms that use Amplitude. Coinbase says it is emailing the people hit, as the law asks it to, and it found no sign anyone got into its own systems.
What Coinbase has not said yet is the part people want most: how many customers, and which exact details. Cointelegraph asked and got no answer before it published, and CoinDesk notes the same two gaps are still open. That silence leaves room for guesswork, and guesswork is where scams grow.
Read also: Bithumb Hack Exposes Staff Data as Korean Finance Firms Face Attacks
What can scammers do with just contact details?
Quite a lot, sadly. CoinDesk puts it plainly: even with no passwords or money touched, a real email address or phone number is useful material for phishing and fake support messages. A message sent to your real email or phone number, dressed up to look like it came from Coinbase, is much harder to spot than a random spam text.
My own read is simple: "funds are safe" answers the wrong question here. The real test is how many convincing scam texts and emails show up in the next few weeks, and whether Coinbase names a number before they do.
This did not happen alone. On the same day, South Korea's Daishin Securities said hackers took personal details of 38,490 customers, and Bithumb is still checking its own leak. Coinbase has been here before, too. In May 2025, it said a breach hit under 1% of its monthly users, with costs of up to $400 million. That history is why a "small subset" today still deserves a straight answer.
Read also: CoinDCX Confirms $16 Million Loss After Denying Breach — What Happens Next?
— BitByLine News Desk
This post is news only, not financial advice. BitByLine never tells anyone to buy or sell crypto. That call is yours alone, and the risk is yours too, so do your own research first before you act on anything you read here. Read our full Disclaimer.
Sources: CoinDesk, Cointelegraph