Coinbase confirmed that customer funds remain safe after a data exposure incident traced to third-party analytics provider Amplitude rather than the exchange's own systems. The breach affected only a "small subset" of customer contact information, alongside data belonging to other Amplitude clients. Coinbase stated it is notifying impacted customers via email as required by law and emphasized that no unauthorized access occurred on its infrastructure. The disclosure highlights ongoing supply-chain risks in crypto security, where user data can be compromised through vendors even when core platform systems remain intact. While passwords, private keys, and funds were not exposed, leaked email addresses and phone numbers can still be exploited for phishing and social-engineering attacks. Coinbase did not specify the exact number of affected customers or which contact-data fields were involved.