Hacker Claims Sale of 335 Million Binance User Records; Binance Denies System Breach

According to Bleeping Computer, an individual claiming to be a member of the hacking group ShinyHunters posted on the dark web alleging possession of data stolen from Binance. The purported trove includes KYC documents, infrastructure details, user passwords, private keys, transaction histories, emails, and phone numbers spanning over 335 million users, with the hacker demanding a $900,000 ransom under threat of public release. Binance denied that its systems were breached, stating there is no evidence of compromise and suggesting the claim represents an extortion attempt using fraudulent information. Binance noted that it does not store passwords in plain text nor hold private keys for external wallets, and no longer operates in the region cited by the hacker, adding that any authentic data was likely gathered via infostealers on end-user devices.

Key takeaways

• A claimant identifying as ShinyHunters alleged obtaining over 335 million Binance user records, demanding $900,000 to prevent publication.
• Binance refuted claims of a system breach, stating it stores neither plain text passwords nor external private keys, and suspects fraud or client-side theft.
• The report also noted an earlier incident investigated by Binance where engineers were targeted via social engineering and internal AI tools were leveraged to divert assets.