Coinbase Denies Breach, Says Vendor Amplitude Exposed Customer Data

The significance here is less about the exposure itself than about where it sits: the data left Coinbase's perimeter through an analytics vendor, which is the kind of dependency that is hard to audit and rarely surfaces until something goes wrong. Coinbase's denial of a breach is a statement about its own systems, not about the vendor's handling of data passed to it, and that distinction is what affected customers will be weighing. Whether exchanges tighten scrutiny of third-party analytics providers, and how Amplitude accounts for the exposure, is the open question.