Binance says a listing that claims to offer 335.9 million lines of user data is likely a scam. The exchange says it has found no evidence that its systems were compromised, but it continues to investigate.
Binance disputed a claim attributed to ShinyHunters that the group stole 335.9 million lines of user data. According to a Binance spokesperson speaking to crypto.news: "this appears likely to be a scam rather than evidence of a Binance systems breach."
The exchange's customer-support account published the same assessment on Nov. 8. It said Binance had found no evidence that its systems, customer identity-verification data, account credentials, wallet private keys or internal infrastructure information were compromised in connection with the listing.
What the listing claims
Cybersecurity monitoring firm ThreatMon reported a forum listing attributed to ShinyHunters that advertised 335,900,000 lines of information covering users in approximately 170 countries. The seller demanded $900,000 in Bitcoin or Monero and threatened to release the data if Binance did not pay, according to ThreatMon.
The purported contents include email addresses, phone numbers, passwords, identity cards or passports and transaction histories. The listing also claims to offer information about assets in Binance's hot wallets and wallet private keys. Those claims remain unverified, and the advertised line count is not a confirmed count of affected people.
Why Binance doubts it
Binance pointed to several inconsistencies. It says it does not store passwords in plaintext or hold private keys for users' external wallets, and the listing references jurisdictions where it no longer operates. Its support account said similar past listings have involved information stolen by malware from users' own devices rather than from Binance's systems.
ThreatMon said the seller had placed a sample behind a forum paywall and described the alleged breach as unverified. Separately, cybersecurity firm Brandefense said on Nov. 3 that it had not opened or tested any sample. Its researchers judged that the mixture of identity documents, wallet keys and infrastructure details looked more like recycled data or a scam than a single extraction.
A separate incident
The customer-data allegation is distinct from the Oct. 29 wallet attack. In its Nov. 3 incident report, Binance said attackers gained unauthorized access to an internal wallet-signing service, affecting approximately $6.34 billion in digital assets.
Binance's support account urged users to watch for phishing attempts and never share passwords, two-factor authentication codes, seed phrases or private keys.
Sources: The Defiant
Trading involves risk.
Risk Disclaimer
