Coinbase Says Customer Contact Data Exposed via Vendor Amplitude, No Breach

The significance here is structural rather than operational: the exposure ran through an analytics vendor, not Coinbase's own defenses, which puts the spotlight on third-party data governance across crypto exchanges rather than on custody or wallet security. Customers whose contact details sat with Amplitude are the affected group, though the undisclosed scale makes that hard to size. The open question is whether vendor-side exposure becomes a recurring pattern for exchanges that lean on outside analytics tools, and whether disclosure norms tighten around third-party incidents specifically.