tl;dr
Over 18 million records of US-based cryptocurrency users are reportedly for sale on the dark web, containing sensitive personal information from over 20 major crypto exchanges and platforms. The data includes full names, email addresses, phone numbers, and physical addresses, with records from Binan...
Over 18 million US-based cryptocurrency users’ records, including sensitive personal information from over 20 major exchanges, are being sold on the dark web for $10,000, raising serious security concerns.
The leaked data includes millions of records from platforms such as Binance US, Crypto.com, Coinbase, Robinhood, Kraken, Gemini, CoinMarketCap, and more. This potentially exposes users to identity theft and other cybercrimes.
Binance denies a direct breach of their systems, attributing the leak to compromised browser sessions on infected computers. They emphasized that their security team monitors known hackers exploiting infected machines rather than suffering direct data theft.
Additional dark web listings offer crypto investor leads tied to Robinhood accounts across the US and Europe—a dataset obtained not through public scraping but unauthorized access, highlighting increasingly sophisticated breaches.
The scale of this data exposure exemplifies the urgent need for heightened security measures in the crypto industry, such as enabling two-factor authentication, using unique passwords, and maintaining awareness of phishing attacks.
The dataset reportedly includes about 1.5 million Binance US phone records, nearly 80,000 full Binance US records, 1.8 million from Crypto.com, 432,000 from Coinbase, 197,000 from Robinhood, 121,000 from Kraken, 800,000 from Gemini, and over 76,000 from CoinMarketCap.
This data sale is not an isolated incident; past reports have noted similar leaks involving Ledger, Gemini, and Robinhood. Just last month, over 230,000 user records from Binance and Gemini appeared for sale on the dark web.
As the crypto industry continues to face persistent security challenges, users must stay vigilant and adopt best practices to protect their personal information from misuse and cyber threats.