Disclaimer: Information found on CryptoreNews is those of writers quoted. It does not represent the opinions of CryptoreNews on whether to sell, buy or hold any investments. You are advised to conduct your own research before making any investment decisions. Use provided information at your own risk.
CryptoreNews covers fintech, blockchain and Bitcoin bringing you the latest crypto news and analyses on the future of money.
Coinbase and Bithumb Report Customer Data Breaches
![]()
The largest U.S. cryptocurrency exchange, Coinbase, and South Korea’s leading crypto asset trading platform, Bithumb, have reported customer data breaches. The exact number of affected users has not been disclosed by either exchange.
Coinbase management assured that its own systems were not compromised. The incident occurred on the side of Amplitude, an analytics service used by Coinbase. The exchange stated that the leak affected a small portion of customer contact data, as well as information about Amplitude users. The full list of leaked data is not being disclosed. Coinbase insists that customer funds are safe. Affected customers will receive email notifications, the exchange announced.
Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers. We’ve found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted. We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.
— Coinbase Support (@CoinbaseSupport) October 28, 2026
South Korean brokerage company Daishin Securities, which deals with tokenized securities, also reported a data leak and provided more precise figures. Hackers attacked a server associated with the remote brokerage account opening service, compromising the data of 38,490 clients (names, email addresses, home addresses, communication system IDs, bank names, bank account numbers, brokerage account numbers, and mobile phone numbers). The company detected suspicious activity on October 17 and blocked the attackers’ IP addresses, notifying financial regulators about the incident.
South Korean company Mirae Asset Global Investments, which owns the cryptocurrency exchange Korbit, also reported unauthorized access to a number of its systems. Unknown individuals were viewing information used for internal business operations. However, the company assured that no user personal or banking data was stolen. No financial losses, malware infections, or service disruptions were recorded.
Recently, Foundation, the manufacturer of Passport hardware wallets, warned customers about phishing emails from the company’s official domains. The attackers gained access to the Cloudflare hosting provider’s API keys.