Binance Says Rumors of 335.9 Million User Data Breach May Be a Hoax

on November 9, Binance stated that a message claiming to sell 335.9 million user records may be a scam, according to The Defiant; currently, there is no evidence that its systems, customer identity verification data, account credentials, or wallet private keys have been compromised as a result, and investigations are ongoing.

Security monitoring company ThreatMon stated that the seller on the forum is demanding $900,000 and threatening to publish the data if Binance does not pay. The seller claims the data covers users from approximately 170 countries, including identity information, passwords, and private keys, but these claims and samples have yet to be verified, and the record count does not equate to the number of affected individuals.

Binance pointed out that the platform does not store passwords in plaintext, nor does it hold private keys for users' external wallets, and the message referenced regions where it no longer operates. The report noted that this alleged data breach is separate from the wallet attack incident on October 29.