# Coinbase Denies System Breach Following Data Leak Allegations Exchange confirms third-party provider Amplitude suffered a security incident impacting client contact data. - **Source:** [INCRYPTED](https://brifing.si/source/7cd4625d-3f08-4cc1-983d-4c7d991839ba) - **Published:** 2026-10-28 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/5cf26989-8939-4467-8396-7900d68e6095 ## Allegations of Data Leak On October 28, 2026, crypto blogger DelCrxpto claimed that over 70,000 Coinbase users had their contact information compromised. This report was later amplified by the security director of SlowMist, known as 23pds. However, no independent technical evidence was provided to verify the specific scale of this alleged data exposure. ## Coinbase Infrastructure Integrity Coinbase officially denied any breach of its internal systems. The exchange clarified that its own infrastructure remains secure and uncompromised. The company emphasized that no unauthorized access to its internal databases was detected, effectively distancing its core operations from the security incident reported by external observers and various social media accounts. ## Third-Party Provider Involvement The security incident occurred at Amplitude, a third-party analytical service provider used by the exchange. Coinbase confirmed that this breach impacted a subset of its client contact data alongside information from other Amplitude customers. The exchange is currently coordinating with the provider to assess the full scope of the exposed information. ## User Asset Security Coinbase confirmed that no user funds were affected by the incident. There is currently no evidence suggesting that account passwords or private keys were compromised during the breach. The company maintains that the security of customer assets remains intact, as the incident was limited to contact details managed by the external partner. ## Regulatory and User Notification In compliance with legal requirements, Coinbase is actively notifying affected users and relevant regulatory authorities. While the company has acknowledged the incident, it has not disclosed the exact number of impacted clients or the specific nature of the compromised data fields, leaving the 70,000 figure unconfirmed by official corporate statements. ## Phishing and Social Engineering Risks Although financial assets remain secure, the exposure of contact information poses a significant risk for phishing attacks. Malicious actors often leverage such data to impersonate exchange support staff, attempting to manipulate users into revealing account credentials. Clients are advised to remain vigilant against suspicious communications claiming to originate from the platform. ## Historical Context of Breaches This incident follows a major data breach in May 2025, where contractors were bribed to access KYC information. That previous event resulted in extortion demands of $20 million and potential remediation costs ranging from $180 million to $400 million. The Department of Justice had launched an investigation into those specific prior activities. ## Operational Security Implications The incident highlights the inherent risks of relying on third-party analytical providers for data processing. Even when internal systems are robust, supply chain vulnerabilities remain a critical vector for security teams. Organizations must continuously audit the security protocols of all external vendors to prevent unauthorized access to sensitive customer contact information. ## Sources covering this story - https://incrypted.com/coinbase-oprovergla-vzlom-svoyh-system-posle-soobshchenyj-ob-utechke-dannyh-70-000-polzovatelej/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._