Binance says a seller's claim to have 335 million user records for $900,000 is likely a scam, and the exchange says it found no sign of a breach.
Binance, the world's largest crypto exchange, says a hacker's claim to have stolen records on 335 million users is likely a scam. The company told BleepingComputer it found no evidence of a breach. The seller wants $900,000 for the data, and says Binance has only two options left: pay or leak.
The listing appeared on a newly emerged underground cybercrime forum. The seller uses the name ShinyHunters, but is believed to be impersonating the real extortion gang of that name. The seller says the data includes:
A Binance spokesperson said the company found no evidence that its systems, customer ID data, passwords, private keys or internal information were compromised in connection with this listing. The company also pointed to details that clash with how it stores data. It does not hold private keys for users' external wallets. It does not store passwords in plaintext. It no longer operates in some of the places the listing mentions.
Binance added that similar past listings often used data from infostealer malware. That is software that quietly copies information from a person's own device, so no break-in at the exchange is needed. Other forum users were also doubtful. One asked why someone holding every wallet's private keys would bother selling data.
BleepingComputer notes this comes after Binance confirmed last week that North Korean hackers tricked an employee into installing malware during a fake job interview. The report says they stole about $6.34 billion in crypto after compromising the company's wallet infrastructure. The FBI blamed the group known as TraderTraitor. The report does not link that attack to this new listing.
Binance's own advice is simple. Nobody from a real exchange needs your secrets, and scammers like to use breach news as bait. It is not yet known whether the seller has any real data or where it came from. Binance's denial is its own statement.
If you use crypto, never share passwords, 2FA codes or seed phrases, and treat any message about a breach with suspicion.
AI agents can email, book and pay for you, which makes the question of how much access they get to your accounts a real security issue.
Read more: Why AI agents that act for you raise new security questionsA compliance software CEO says AI agents already handle routine GRC tasks, and the people who check their data and set their limits will keep the value.
Read more: AI agents now do compliance busywork, so workers need new skillsA talk at Money20/20 USA 2026 looked at how AI is being used to fake identities, and why that matters for anyone with a bank account.
Read more: A fintech talk takes on AI-powered identity fraud
