Binance calls alleged leak of 336 million user records a likely scam
Binance dismissed a hacking forum listing claiming to sell roughly 336 million user records for $900,000, saying it found no evidence of a systems breach and that the claims contradict how it stores data.
Binance has labeled claims that hacker group ShinyHunters stole data belonging to 335.9 million users as a likely scam. The claims originated from a hacking forum listing that demanded $900,000 for the database, alleging that the records contained readable passwords and external wallet keys.[1][2][3][4][5]
Binance Customer Support stated on X that the exchange is actively investigating claims made on the forum and across social media, but an internal review turned up no evidence of any breach. The company reported that its systems, customer KYC data, account credentials, wallet private keys, and internal infrastructure information remain uncompromised.[2][4][5]
According to Binance, several details in the listing conflict directly with its security practices. The exchange does not store user passwords in plaintext or hold private keys for users' external wallets, and the data references jurisdictions where Binance no longer operates. It added that similar historical listings often rely on data collected from users' own infected devices using infostealer malware rather than an intrusion into exchange systems.[1][4][5]
Key facts
- A hacking forum listing attributed to ShinyHunters claimed to offer 335.9 million Binance user records for $900,000.
- Binance said its investigation found no evidence that its systems, KYC data, account credentials, wallet private keys, or infrastructure were compromised.
- The exchange noted that it does not store passwords in plaintext and does not hold private keys for external wallets.
- The listing referenced jurisdictions where Binance no longer operates.
- Binance suggested the alleged records may stem from infostealer malware gathered from users' personal devices rather than a breach of exchange infrastructure.
Sources · 5 sources
- CB
Coin Bureau@coinbureauPost on X ·
⚡️UPDATE: Binance says a $900,000 listing claiming to offer 335.9 MILLION user records is likely a SCAM. The listing, attributed to ShinyHunters, claims to include readable passwords and external wallet keys. Binance says it stores neither and has found NO evidence its systems, customer IDs, logins or wallet keys were compromised. The probe continues. Binance says similar listings have used data stolen from users’ devices by malware.
Open source - DE
Decrypt@DecryptMediaPost on X ·
Binance Says Alleged 335 Million-Line User Data Leak Is Likely a Scam. Binance said Sunday it found no evidence its systems, KYC data, account credentials or wallet private keys were compromised, after a hacking-forum listing attributed to ShinyHunters claimed 335.9 million lines of user data.
Open source - SI
Solid Intel 📡@solidintel_xPost on X ·
INTEL: Binance says claim of 336 million users' data leaked is likely a scam
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 UPDATE: Binance says it found no evidence of a breach and called ShinyHunters’ claim of 335M stolen user records a likely scam. https://t.co/28RYgqIIzf
Open source - WB
Wu Blockchain@WuBlockchainPost on X ·
Binance Says Alleged 335M-User Data Leak Likely a Scam @BinanceHelpDesk said it is investigating claims that ShinyHunters stole data on 335 million users and demanded $900,000, but has found no evidence that its systems, KYC data, account credentials or wallet private keys were compromised. The exchange said parts of the listing are inconsistent with how Binance stores user data and that the dataset may instead involve infostealer data taken from users’ own devices.
Open source