Binance Denies 335.9M User Record Breach

Binance Denies 335.9M User Record Breach, Labels $900K Dark Web Listing Fake

Binance says a dark web listing attributed to ShinyHunters claiming 335.9 million user records is fraudulent and likely sourced from malware targeting individual devices, not exchange systems.

The Digital Assets Desk

Gokhshtein Media

November 9, 2026

3 min read

Binance has dismissed a $900,000 dark web listing attributed to ShinyHunters as fraudulent. The listing claims to offer 335.9 million user records with readable passwords and external wallet keys.

The exchange denied the claims outright, stating it does not store user passwords in readable format and does not hold external wallet keys in its systems. Binance's internal investigation found no evidence of compromise to customer IDs, login credentials, or wallet keys.

Binance is investigating whether the advertised data originates from malware deployed against individual user devices rather than a direct breach of exchange infrastructure. The probe remains active.

This assessment aligns with previous data listings where information was stolen directly from users' computers through malicious software, bypassing exchange security by targeting endpoints rather than central systems.

Binance has dismissed a $900,000 dark web listing attributed to ShinyHunters as fraudulent. The listing claims to offer 335.9 million user records with readable passwords and external wallet keys.

Binance is investigating whether the advertised data originates from malware deployed against individual user devices rather than a direct breach of exchange infrastructure. The probe remains active.