Coinbase Users’ Contact Details Were Exposed Through a Vendor. How Do You Protect Yourself?
A vendor security incident just handed scammers the contact details they need to impersonate Coinbase support and drain your crypto account. Here is what you can do right now to make yourself a much harder target.
A phone number and email address can be all a scammer needs to sound legitimate on a call and convince someone to transfer cryptocurrency from an exchange. Unfortunately, many Coinbase (NASDAQ:COIN | COIN Price Prediction) users are now at risk after a security incident involving an analytics vendor exposed their contact information.
So, what security measures can you take to protect yourself, and how does this incident relate to Coinbase’s upcoming earnings report?
What Happened With Amplitude and Why Scammers Target This Information
Coinbase has confirmed that there was no breach of its own systems. Instead, an analytics vendor, Amplitude (NASDAQ:AMPL), experienced a security issue that affected a small number of user contact details. The company assured that customer funds were not compromised.
According to SlowMist’s chief information security officer, hackers accessed contact information for more than 70,000 users. Coinbase Support said the data leak originated with Amplitude and also affected several other clients of the vendor. Coinbase is notifying affected users and regulators as part of its response.
Binance founder Changpeng Zhao has warned of similar data leaks at companies like Amplitude, Bithumb, Mirae Asset, and Daishin Securities. He pointed out that exposed contact information can lead to phishing, SIM swap attacks, and targeted scams. A different data theft incident disclosed in May 2025 already cost Coinbase around $48 million in Q3 2025 expenses, with the stolen data used in impersonation scams.
| Question | Answer |
|---|---|
| Who’s affected | Over 70,000 users, according to SlowMist |
| What leaked | Contact information held by Amplitude |
| What wasn’t impacted | Coinbase’s systems and customer funds |
| Main threat | Phishing calls, fake support, and SIM swaps |
Scams like these often begin with a phone call. One Reddit user recounted receiving a “fairly convincing robocall” warning them of a login attempt from Salt Lake City, the opening line of a pitch that leads the victim to unwittingly read out a verification code.
Security Measures to Protect Yourself
Text message codes can act like a spare key to your account, but this leak gives scammers a path to your door. A SIM swap occurs when a criminal tricks a phone carrier into transferring your number to a SIM card they control, allowing them to redirect all login codes to their phone.
Passkeys and hardware security keys tie your login to a physical device, making it impossible for fraudsters to phish for sensitive information over the phone or fake it with a login page. We believe switching to these security options is the most effective step anyone affected by the leak can take.
A PIN or number lock with your phone carrier blocks unauthorized transfers of your number. Withdrawal address allowlisting limits withdrawals to specific wallet addresses you’ve approved in advance, so if someone gains access to your account, they still have to clear extra checks before moving your funds.
A unique email alias used only for your exchange account makes it clear that any “Coinbase” email reaching your everyday inbox is likely a scam. A free credit freeze with Equifax (NYSE:EFX), Experian, and TransUnion (NYSE:TRU) blocks scammers from opening new accounts in your name. Coinbase will never ask for your password or ask you to transfer funds, so any such request is a scam, regardless of the caller ID.
What the Incident Means for Coinbase and Its Users
Coinbase shares were down about 2% in premarket trading, trading near $158. The stock has decreased roughly 19% over the past month and about 30% since the beginning of the year.
The company is set to report its third-quarter results after the market closes on October 29, 2026. Last quarter, Coinbase reported a $1.36 per-share loss on $1.22 billion in revenue.
Investors will likely focus on trading volume and transaction revenue, especially after Robinhood Markets (NASDAQ:HOOD) reported a significant drop in crypto revenue. During a July 30, 2026 call, CEO Brian Armstrong said, “Customers do not choose Coinbase because we are the cheapest; they choose us because we are the most trusted.” This latest data leak raises questions about that trust.
What the Leak Means for Users and Investors
Although the leak does not compromise users’ funds, it puts affected individuals on a target list for potential scams. The security measures above are worth putting in place now, before a suspicious call comes in.
For investors, the leak looks minor next to the broader downturn in trading, since Coinbase says its systems and funds weren’t involved. But the costs tied to this incident could still raise doubts about the trust Armstrong promotes.
Contact [email protected] for any questions or corrections.
Sam Daodu is a crypto analyst and the editor of 24/7 Wall St.'s Crypto Desk, where he covers Bitcoin, XRP, Ethereum, Solana and the altcoins investors search for most. His work focuses on price levels, spot ETF flows, on-chain data and the regulatory decisions that move crypto markets, written so a first-time buyer and a seasoned trader can both use it.
Sam has written about crypto professionally since 2019 and has published more than 2,000 articles. Before joining 24/7 Wall St., he wrote for crypto media outlets and Web3 companies and ghostwrote for crypto founders and token launches. His analysis is syndicated on Yahoo Finance, MSN and AOL and has been cited by other crypto news sites. He also founded MacLabs Marketing, a content and personal branding agency for crypto founders and executives.
When he isn't reading charts, Sam is usually at the gym or watching One Piece, a series he maintains has better tokenomics than most altcoins.
