Crypto Data Leaks Hit Coinbase Vendor and Bithumb: How Users Can Protect Their Accounts

Crypto data leaks are back in the spotlight after four reported incidents involving cryptocurrency platforms and South Korean financial firms. According to an X post by CZ, Coinbase vendor Amplitude exposed some users’ contact information, while South Korean exchange Bithumb also experienced a user data leak. Two traditional securities firms, Mirae Asset and Daishin Securities, were also reportedly affected.

The incidents highlight an uncomfortable reality: protecting customer funds isn’t enough when personal information falls into the wrong hands.

Four Reported Data Leaks Raise Security Concerns

The reported incidents involve both cryptocurrency services and traditional finance. Although the Coinbase vendor incident reportedly exposed contact data, funds were said to be unaffected. 

Still, leaked names, email addresses, phone numbers, home addresses, identification documents, and transaction histories can create serious risks. Criminals may use this information for phishing, SIM swapping, and social engineering. In some cases, exposed personal details and information about holdings can also increase the risk of real-world extortion.

Lock Down Your Crypto Accounts Before Trouble

Start with the basics. Use a unique email alias for each exchange, avoid sharing unnecessary profile details, and consider a dedicated phone number for financial accounts.

A password manager can generate strong, unique passwords. For stronger authentication, use hardware security keys, passkeys, or an authenticator app instead of SMS-based two-factor authentication.

Where available, enable withdrawal address whitelisting, withdrawal time locks, and anti-phishing codes. Regularly review active sessions and API keys, delete unused keys, and restrict necessary API access by IP address.

What Crypto Users Should Do After Breaches

Never trust unsolicited messages claiming to offer account recovery or urgent security assistance. Legitimate exchange support staff won’t ask for passwords, authentication codes, or seed phrases. Visit exchange websites directly instead of clicking email or text links.

If a breach is announced, change affected passwords, revoke suspicious sessions and API keys, review withdrawals, and check whether your email appears on Have I Been Pwned.

Crypto data leaks don’t automatically mean funds are compromised. But stronger account security and less exposed personal information can make life considerably harder for attackers.