Coinbase says customer contact data was impacted in a breach at one of its vendors.

Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

The cryptocurrency exchange acknowledged the incident late Tuesday (Oct. 27) while denying reports that it had suffered a breach on its end.

“Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers,” the company’s support unit said in a post to social media platform X.

“We’ve found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted. We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.”

This incident follows a number of breaches involving crypto companies in the past few months. Findings released last month by CoinGecko showed that hacks and thefts had cost crypto platforms more than $3.6 billion in the previous 18 months.

Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!

The research found that most of those incidents — resulting from cyberattacks and stolen passkeys — occurred even though the companies had performed security audits, though most of the attacks involved areas that checks do not typically cover.

“Audit reports often fail to capture the full spectrum of risk,” the CoinGecko report said. “Most exploits on audited systems target external infrastructure, unaudited code updates, or systemic features manipulated via governance attacks.

Source link