Science & Tech · Cybersecurity · 1 hr ago
Binance denies alleged breach involving data of 335 million users
A person using the ShinyHunters name claimed to be selling data on 335 million Binance users on an underground cybercrime forum.
The person asked for $900,000 and claimed the information included identity documents, account details and transaction histories.
Binance said it found no evidence of a breach and called the listing likely to be a scam.
The company said some of the claims do not match how it handles information, including that it does not hold private keys for users’ external wallets or store passwords in plain text.
The claims remain unverified, and other forum users also questioned whether the data was genuine.
Binance advised customers not to share passwords, two-factor authentication codes, seed phrases or private keys, and to watch for phishing attempts.
Binance denied an alleged breach after a threat actor claimed to be selling data on 335 million users.
The actor, using the ShinyHunters name, demanded $900,000 for the purported records.
Binance said it found no evidence that its systems or customer data were compromised and called the claim likely a scam.
The company said some details in the claim conflict with how it stores user data.
Binance urged customers to protect their passwords, two-factor authentication codes, seed phrases and private keys.
- Who
- Binance and a threat actor using the ShinyHunters name.
- What
- The actor claimed to sell data on 335 million Binance users; Binance denied a breach.
- When
- November 9, 2026, according to the article's publication date.
- Where
- The alleged listing appeared on a newly emerged underground cybercrime forum.
- Why
- The actor sought $900,000 for the purported data. Binance said the claim was likely a scam.
The threat actor using the ShinyHunters name
Binance
Claim
The threat actor using the ShinyHunters name
The actor claimed to have records of 335 million Binance users.
Binance
Binance said it found no evidence of a breach.
Data and systems
The threat actor using the ShinyHunters name
The actor claimed the records included customer and internal information.
Binance
Binance said the listing's claims conflicted with its data practices, including that it does not hold private keys for users' external wallets.
BleepingComputer reported Binance's denial of the alleged breach.
Binance confirmed that North Korean hackers tricked an employee into installing malware during a fake job interview.
- Users allegedly affected
- 335 million
- Ransom demand
- $900,000
- Alleged seller
- Threat actor using the ShinyHunters handle
- Company response
- Binance said it found no evidence of a breach
- Alleged forum
- Newly emerged underground cybercrime forum
What people are saying
two options left: pay or leak.
We have found no evidence that Binance systems, customer KYC data, account credentials, wallet private keys, or internal infrastructure information were compromised in connection with this listing,
Similar past listings have often involved infostealer malware data collected from users' own devices rather than a breach of Binance systems.