Amplitude shares move following security update; Coinbase clarifies no data breach

Software solutions company Amplitude (AMPL) on Wednesday released an update on its site about a recent security incident.

“On September 28, 2026, our security team detected, contained, and remediated unauthorized access to a localized portion of Amplitude’s internal systems,” the company said. Shares dipped over 3% in extended trading after rising in the session.

Amplitude (AMPL) said it is unrelated to recent vulnerabilities identified in PHP or Node.js, adding that the incident impacted event data belonging to less than 0.3% of customer accounts, all of whom have been contacted directly.

“Our investigation, supported by an independent forensics firm, has confirmed that no end-user information was exposed for any other Amplitude customers.”

“We hesitate to overreact to the disclosure, given the limited scope, completed remediation, Amplitude’s importance to customers’ product success, and the potential disruption of switching solutions,” Raymond James analyst Mark Cash writes in a note, according to reports. Says Amplitude “has demonstrated value to Coinbase (COIN), and replacing a vendor embedded in revenue-generating operations could prove disruptive”.

Coinbase, in a post on Oct. 28, said it has not had a data breach. Amplitude, an analytics vendor, experienced a security incident that impacted a small subset of Coinbase customer contact data, among other Amplitude customers.

"We’ve found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted. We are notifying impacted customers and regulatory agencies in accordance with our legal obligations."

Amplitude serves 4,900+ paying customers worldwide, including Atlassian, Burger King, NBCUniversal, and Square.