Coinbase Denies Direct Breach in Vendor Data Leak

Update (Oct 28, 07:57 UTC): Coinbase clarified that customer contact data was exposed due to a security incident at third-party analytics vendor Amplitude. The exchange confirmed that an investigation found no evidence of unauthorized access to its own internal systems.

Four financial and cryptocurrency companies have reported separate data security incidents impacting customer contact details and internal business information, according to CryptoNews. The disclosures involve Coinbase, Bithumb, Mirae Asset Global Investments, and Daishin Securities.

Coinbase confirmed that a small amount of customer contact information was exposed through its third-party analytics provider Amplitude. The exchange stated that its own systems were not compromised, customer funds remain safe, and affected users are being notified via email.

In South Korea, exchange Bithumb reported unauthorized access to its internal mobile groupware system on October 27. Bithumb stated that the compromised work system is isolated from its cryptocurrency trading infrastructure and is investigating the exact scope of the incident with the Korea Internet & Security Agency and the Personal Information Protection Commission.

Daishin Securities disclosed that personal and credit information belonging to 38,490 customers was exposed after hackers targeted a server connected to its remote brokerage account opening service. Meanwhile, Mirae Asset Global Investments reported unauthorized access to internal web systems, though it maintained that general investors' personal and credit information was not compromised.

Key Facts

• Coinbase exposure occurred via analytics provider Amplitude, exposing a small subset of customer contact data.
• Bithumb detected unauthorized external access to its internal mobile groupware system on October 27.
• Daishin Securities confirmed 38,490 customer accounts were exposed following an attack on its remote brokerage server.
• Mirae Asset Global Investments reported unauthorized access to internal web systems with no customer information compromised.