exchange ·
Coinbase says user funds safe after third-party vendor Amplitude exposed customer contact info
The Nasdaq-listed cryptocurrency exchange Coinbase has refuted reports of a security compromise, asserting that its customer funds remain secure.
The exchange clarified that the data exposure originated with Amplitude, a third-party analytics provider, and not within Coinbase's own infrastructure.
The compromised data reportedly involves only a “small subset” of contact information, alongside details pertaining to other Amplitude clientele, as communicated via Coinbase Support’s X handle.
In adherence to legal mandates, Coinbase is notifying the affected customers via email. The firm has emphasized that its internal systems have detected no evidence of unauthorized access.
While customer assets are safe, the disclosure means that exposed phone numbers and email addresses could be utilized for phishing and social-engineering endeavors, even without the compromise of private keys or passwords.
This incident highlights inherent supply-chain risks, indicating that security vulnerabilities can arise from third parties even when an institution's primary operational systems are secure.
Coinbase did not provide specifics regarding the number of affected customers or the precise fields of contact data that were exposed.
This event occurs amidst disclosures of customer data breaches at various financial institutions in South Korea. For example, Daishin Securities reported that personal details of 38,490 customers, including names, email addresses, and mobile phone numbers, were hacked following the detection of unauthorized access last week.
Financial authorities have also initiated an inspection into the data breach experienced by Mirae Asset Global Investments, while Yonhap News Agency reported a cyberattack involving the leakage of some personal information belonging to Bithumb customers.
These developments underscore a broader regulatory and operational focus on third-party risk management across the financial sector.
Why it matters
This incident highlights the growing regulatory and operational risk associated with supply chain vulnerabilities in the crypto industry. Exchanges must navigate how third-party vendor security failures can still impact customer data privacy and security protocols.
