Binance says forum listing of 335.9M user records is likely a scam, finds no breach
A seller using the ShinyHunters name wants $900,000 for the alleged data. Binance says it is still investigating but has found no sign its systems, identity data, credentials or keys were compromised.
· Announced · Verified 2026-11-09 via official announcement
Announced Nov 8, 2026: Binance says forum listing of 335.9M user records is likely a scam, finds no breach. Affects: Binance account holders. Source: x.com, verified Nov 9, 2026. If this rules Binance out, our top-listed alternative is Bybit (0.2% round trip; code WQ3GV, $20 sign-up bonus).
Binance said on 8 November 2026 that a hacking-forum listing claiming to sell 335.9 million lines of Binance user data appears likely to be a scam rather than evidence of a breach of its systems. Its customer-support account said Binance is still investigating and has found no evidence that its systems, customer identity-verification data, account credentials, wallet private keys or internal infrastructure information were compromised.
Security-monitoring account ThreatMon reported that the listing, attributed to the ShinyHunters group, advertised 335,900,000 lines of information on users in about 170 countries, including emails, phone numbers, passwords, identity documents, transaction histories, wallet private keys and hot-wallet details. The seller asked for $900,000 in bitcoin or monero and threatened to publish the data. ThreatMon said a sample sat behind a forum paywall and that the claim had not been independently verified. A line count is not a count of affected people.
Binance pointed to inconsistencies: it says it does not store passwords in plaintext, does not hold private keys for users' external wallets, and the listing names jurisdictions where it no longer operates. It said similar past listings have often been infostealer malware data taken from users' own devices. The Defiant reports that security firm Brandefense, which reviewed related Telegram adverts on 3 November without testing a sample, judged the mix of data more likely recycled or a scam.
This claim is separate from the 29 October theft of about $6.34 billion from Binance hot wallets. No fund movements, withdrawal pauses or account changes have been announced in connection with the listing. Binance told users to watch for phishing and never to share passwords, two-factor codes, seed phrases or private keys.
“Based on the description provided and the sample information reviewed so far, this appears likely to be a scam rather than evidence of a Binance systems breach.”
— Binance Customer Support on X, 8 November 2026
Who this affects
Binance account holders. No confirmed exposure; the main practical risk is phishing that uses the claim as bait.
Binance at a glance
Binance is a centralised crypto exchange founded in 2017 by Changpeng Zhao, now run under Abu Dhabi (ADGM) entities regulated by the FSRA. It offers spot, margin, futures, options, earn products and P2P. Regular users pay 0.10% spot maker and taker (0.075% when paying fees in BNB) and 0.02%/0.05% on USDT-margined futures. It does not serve the US, Canada or the Netherlands; Binance.US is a separate company.
Full Binance sheet · 0.2% round trip
Official site: binance.com
More from the newsroom
Sources
Last checked . Fees and terms change often; the venue's own page wins if it disagrees with ours.
- Binance Customer Support on X - Response to alleged Binance user data set (2026-11-08) — checked 2026-11-09
- ThreatMon on X - ShinyHunters claims 335M Binance user records, demands $900k — checked 2026-11-09
- The Defiant - Binance says 335.9 million-record breach claim is likely a scam (2026-11-09) — checked 2026-11-09
- crypto.news - Binance calls ShinyHunters' alleged 335 million user data breach a likely scam (2026-11-09) — checked 2026-11-09
- PANews - Binance responds to ShinyHunters' claim of stealing 335 million user records (2026-11-09) — checked 2026-11-09
About DexSheet
DexSheet is an independent fee sheet for on-chain trading. It tracks the fees, custody, backers, incidents and availability of 98 crypto trading venues, with a dated source for every number. Every newsroom entry is checked against the venue's own announcement, docs or terms before it is published. Data: fees.json (CC BY 4.0) · RSS.