Actor claims leak of 360,000 BTC-Alpha accounts

MediumBreachNo software to update

In 30 seconds

Alleged

DailyDarkWeb reports that a forum actor claims to have leaked roughly 360,000 BTC-Alpha user accounts and posted sample rows. The report explicitly says the claim is unverified and does not confirm that BTC-Alpha was breached.

What happened

Alleged

According to the post, an unidentified actor made the claim on a dark-web forum and displayed samples said to come from an accounts table. The evidence batch contains neither the underlying database nor an explanation of how it was allegedly obtained.

Why it matters

Inferred

If the samples are authentic, the reported combination of contact details, registration IP addresses and account metadata could help criminals craft convincing cryptocurrency-themed phishing attempts. The available evidence does not establish that these records are genuine or currently being abused.

What to do

Observed

DailyDarkWeb advises users to change passwords they reused elsewhere and watch for cryptocurrency-themed phishing. Because the claim remains unverified, this is a precaution rather than evidence that any particular BTC-Alpha account was exposed.

Confirmed and still uncertain

Observed

The post shows that a leak claim and purported samples were being circulated. It does not verify the database, the number of distinct accounts, the actor's access method, when the data was collected or whether the records actually originated from BTC-Alpha. The batch also contains no direct response from the exchange.

What people are saying

Observed

DailyDarkWeb labels the report an unverified threat-actor claim and stresses that it is not confirmation of a breach. It also says the actor provided neither an access method nor a price.

Evolution

Observed

The evidence captures only one stage of the story: a social-media account relaying a forum actor's claim after purported sample rows appeared. There is no later verification, exchange statement or independent technical analysis in the supplied batch.

Reach

Observed

1 independent groups, 1 updates, and 1 engagements.

Technical detail

Alleged

The actor allegedly described the data as containing email addresses, usernames, registration IP addresses, account metadata and PBKDF2-SHA256 password hashes. DailyDarkWeb says the displayed hashes appear salted and iterated, but this visual assessment does not authenticate the records or prove their origin.

Sources and evidence

Observed

The entire supplied record consists of one DailyDarkWeb post on X, including an attached image and a summary of an unidentified forum actor's statements. Without primary forum material, database samples suitable for validation or a BTC-Alpha response, the central leak claim remains unverified.