Coinbase Denies Data Breach After Amplitude Vendor Incident Exposes User Contact Data

The distinction between a platform breach and a vendor-side incident is the crux here: Coinbase's denial shifts scrutiny onto third-party analytics providers, which sit inside the data perimeter without appearing in most users' mental model of exchange risk. Contact data alone is low-sensitivity compared with credentials or funds, but it is the raw material for phishing and social-engineering campaigns aimed at exchange users. The open questions are whether Amplitude confirms or disputes the account, and whether the notification to regulators prompts any broader review of vendor data handling across the sector.