BleepingComputer reports that a threat actor using the ShinyHunters handle, believed to be impersonating the extortion gang, is selling what they claim are records of 335 million Binance users on a new underground forum and asking $900,000 [1]. The claimed data includes KYC documents, internal infrastructure information, account passwords, wallet private keys, transaction history, emails and phone numbers, but a Binance spokesperson said the company found no evidence of a breach and that this is likely a scam [1]. Binance advises customers never to share passwords, 2FA codes, seed phrases or private keys and to stay wary of phishing [1].
Seller using ShinyHunters name offers alleged data on 335 million Binance users; Binance denies breach
1 min read
- Disclosed
- Nov 9, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance
What to do nowOur advice
Binance advises customers never to share passwords, 2FA codes, seed phrases or private keys and to stay wary of phishing [1]
Timeline
- BleepingComputer reports the sale claim and Binance denial[1]
Technical details
Remediation
Vendor guidance
- 1Protect account secrets mitigate[1]
Never share passwords, 2FA codes, seed phrases or private keys, and stay wary of phishing.
References
Media1
- [1]
“"We have found no evidence that Binance systems, customer KYC data, account credentials, wallet private keys, or internal infrastructure information were compromised in connection with this listing," the Binance spokesperson said.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.