Breaches · 2 days ago
ShinyHunters advertised 335.9 million alleged Binance records for $900,000 on November 4, but Binance says it has found no evidence of a systems or customer-data compromise and considers the listing likely a scam, Infosecurity Magazine reports.
The listing claims to include passwords, external-wallet private keys, customer identity documents and internal data. Binance says it does not store passwords in plaintext or hold private keys for users’ external wallets, and the listing names jurisdictions where it no longer operates. Binance says similar past listings often traced to infostealer malware on users’ devices rather than a breach of its systems.
The nearer-term risk is follow-on phishing: Binance warns attackers may use the claim to solicit passwords, two-factor authentication codes, seed phrases or private keys. For users seeing it alongside separate reporting of a $6.3bn theft from Binance attributed to North Korean actors, the claims may blur together and lend a fraudulent support message credibility without evidence of a breach.
2 sources covering this story
Binance Investigates ShinyHunters Breach Claims
Cryptocurrency exchange Binance says ShinyHunters’ breach claims appear to be a scam
Binance denies data breach after alleged ShinyHunters claims
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum.
Part of the PlainSec briefing for 2026-11-11