Coinbase Customer Data Hit in Amplitude Analytics Vendor Breach

The notable detail is the vector, not the size: the exposure ran through a third-party analytics vendor, the same class of supplier risk that has produced repeated incidents across crypto. Coinbase's emphasis that funds were untouched addresses custody, but the data that analytics tools ingest — identifiers, behavior, potentially account-linked information — is exactly what fuels targeted phishing against exchange users. With scope and timing undisclosed, the open question is whether the "small subset" framing holds as more details emerge, and whether vendor-level access controls become the next front in exchange security reviews.