GoKawiilBinance disputes claim of 335-million-user data breach
A threat actor using the ShinyHunters name listed what it called records of 335 million Binance users for sale on a cybercrime forum, including KYC documents, passwords, private keys and transaction history, demanding $900,000. Binance told BleepingComputer it found no evidence its systems, credentials or infrastructure were compromised, and said the listing resembles past scams built from infostealer malware data taken from users' own devices.
GoKawiil's interpretation of the reporting above, not reported fact.
Binance pointed to details in the listing that don't match how it actually stores data, such as not holding private keys to external wallets or storing passwords in plaintext, which undercuts the seller's credibility. Forum users themselves voiced doubts about the data's authenticity, suggesting the claim may be an extortion attempt rather than a confirmed breach. Even unverified listings like this can pressure exchanges to reassure users and tighten account security messaging.
- A ShinyHunters-linked actor claimed to sell 335 million Binance user records for $900,000.
- Binance says it found no evidence of a breach and suspects the data came from infostealer malware on users' devices, not its systems.
- Inconsistencies in the claim and skepticism from other forum users cast doubt on the data's legitimacy.
YubiKey 5 NFC Security Key — Given the alleged exposure of crypto account credentials and wallet keys, hardware-based two-factor authentication like a YubiKey adds a strong layer of protection that phishing or infostealer malware can't easily bypass. It's a practical step crypto exchange users can take right now to harden their accounts against credential theft.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-09
Published there as: “Binance denies data breach after alleged ShinyHunters claims”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.