Major cryptocurrency exchange Coinbase revealed that a security incident at third-party analytics provider Amplitude exposed contact details for a small subset of its customers, while South Korea's Bithumb separately confirmed a breach of an internal employee system.
Coinbase announced through its official support account on X that its core infrastructure saw no unauthorized access and that customer funds remain completely safe. The disclosure arrives just ahead of Coinbase's third-quarter financial results on Thursday, where market analysts expect the exchange to report revenue near $1.2 billion.
Vendor Breach Impacts Customer Data
While Coinbase did not specify the exact fields compromised or the total number of affected users, an unverified post on X claimed attackers obtained information for more than 70,000 customers. 23pds, chief information security officer at security firm SlowMist, reshared the claim, though Coinbase has not publicly validated any specific figures. The incident mirrors previous vendor-related security challenges for the platform, including a May 2025 event where overseas support contractors were bribed to harvest records for phishing scams. Security concerns across major exchanges continue to draw industry scrutiny following recent data leaks hitting Coinbase and Bithumb.
Bithumb Reports Internal Staff System Intrusion
In South Korea, exchange operator Bithumb reported an unauthorized intrusion into its internal mobile groupware system used by staff members. The firm formally notified the Korea Internet & Security Agency (KISA) and stated that while the breach currently appears limited to employee records, investigators are examining whether user data was also exposed. Bithumb emphasized that its trading infrastructure operates on an isolated network, ensuring customer crypto assets were not compromised. Bithumb previously experienced a 2017 data exposure where details of 3% of its user base were compromised via an employee computer, leading to targeted phishing attempts.
Key Takeaways
- Amplitude Incident: A breach at vendor Amplitude exposed contact details for a subset of Coinbase users, but core exchange systems were not compromised.
- Bithumb Intrusion: Bithumb reported an unauthorized access incident on its employee mobile groupware to KISA, confirming trading systems and user funds remain isolated.
- Financial Timing: Coinbase's Q3 revenue is expected near $1.2 billion, with any potential financial costs from the incident likely reflecting in Q4 figures.
Why It Matters
Third-party vendor vulnerabilities remain one of the most persistent attack vectors for major cryptocurrency platforms, even when core custodial systems and wallets remain entirely uncompromised. As exchanges bolster direct network defenses, malicious actors routinely pivot toward secondary analytics providers, marketing databases, and employee communications networks to siphon contact records. For users, the primary risk following vendor leaks is not immediate loss of funds on-chain, but a sharp rise in sophisticated social engineering and targeted phishing campaigns in the weeks that follow.
