On October 28, Coinbase, the prominent Nasdaq-listed cryptocurrency exchange, dismissed rumors of a hacking incident after it was revealed that customer contact information had been exposed by Amplitude, an analytics provider. The exchange assured its users that their funds remain safe and that no unauthorized access to its systems had occurred.
In a statement, Coinbase clarified that the incident only involved a limited portion of customer contact details held by Amplitude. The company did not disclose the exact number of affected users but emphasized that other businesses utilizing the provider also faced similar vulnerabilities. Reports circulating in the community suggested that over 70,000 Coinbase users might have been impacted, though the exchange did not confirm this figure.
Despite the exposure of email addresses and phone numbers, Coinbase reassured its users that sensitive information such as passwords, transaction histories, and customer assets had not been compromised. The exchange is actively notifying customers whose information was involved and is reporting the incident to relevant authorities as required by law.
This incident comes on the heels of another security breach involving Keystone, a hardware wallet manufacturer, which disclosed on October 24 that customer names, shipping addresses, and order records had been accessed by attackers. However, Keystone stated that private keys and payment details were not exposed.
Coinbase has taken immediate action to mitigate the impact of the data exposure, with customer support teams reaching out to those affected via email. Although the exchange has not specified how many notifications will be sent, it is committed to transparency in addressing this issue.
In the broader context of security concerns in the cryptocurrency space, other incidents were reported on October 26, including phishing emails targeting users of Foundation Passport, which were linked to compromised Cloudflare access keys. Foundation assured its users that their devices and funds were not at risk.
South Korean firms have also faced security challenges recently. Daishin Securities reported a data leak affecting 38,490 customers, while Bithumb, a notable crypto exchange, investigated unauthorized access to its employee systems. Additionally, the Financial Supervisory Service in South Korea is reviewing a separate incident involving Mirae Asset Global Investments.
Adding to the concerns, a recent incident involving Railway, which experienced a security breach, may have led to unauthorized access to customer data. This breach was tied to approximately $371,000 in cryptocurrency theft, although it was unrelated to Coinbase.
In light of these incidents, Coinbase has advised its users to remain vigilant against potential phishing attempts and to verify communications through official channels. The exchange continues to prioritize the security of its platform and the safety of its customers’ assets.
