Binance · Breach

[Single source] Hackers claim theft of 335.9 million Binance records

Nov 08, 2026 · 1 min read

Hackers claim to hold 335.9 million Binance records and demand $900,000 to withhold them. The alleged data includes KYC documents, passports, passwords, transaction histories and private keys. The item provides no confirmation from Binance.

By HIFY Radar newsroom Updated 11/09/2026 01:15 PM Get this every day →← Back to the feed 2 sources

CriticalBreachNo software to update

In 30 seconds

Alleged

An X post says hackers are offering 335.9 million records allegedly linked to Binance for sale and demanding $900,000 not to disclose them. The supplied evidence does not independently verify the hackers’ claims.

What happened

Alleged

According to the post, a darknet advertisement claims the dataset covers users in 170 countries and contains KYC documents, passports, passwords, transaction histories and cryptocurrency-wallet private keys.

Why it matters

Inferred

If authentic, the alleged combination of identity documents, credentials, financial histories and private keys could expose affected people to account compromise, asset theft and identity abuse. This consequence is inferred from the categories of data listed in the post, not from confirmed incidents.

What to do

Inferred

The supplied evidence contains no verified notice from Binance and identifies no confirmed victims, so it does not establish incident-specific remediation steps. Users should treat unsolicited messages invoking this claim cautiously and rely on authenticated Binance communications before acting.

Confirmed and still uncertain

Observed

What is directly observed is that an X account published the allegation. Unknowns include whether the darknet listing exists as described, whether the records are genuine or current, how they were obtained, whether Binance systems were breached, and whether any ransom demand was delivered to Binance.

What people are saying

Alleged

The account Crypto__Goku says hackers claim to possess data associated with 335 million Binance users and are asking for $900,000 to prevent disclosure. No response from Binance, affected users, researchers or authorities appears in the evidence batch.

Evolution

Observed

The evidence batch provides only one social-media post and therefore does not establish a timeline beyond the circulation of the allegation or show subsequent verification, denial, disclosure or resolution.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

The alleged dataset is described as containing KYC files, passports, passwords, transaction histories and wallet private keys. The evidence provides no technical indicators, file structure, timestamps, provenance, breach method or validation results.

Sources and evidence

Observed

The entire evidence batch consists of a single X post by Crypto__Goku summarizing an alleged darknet advertisement. Because no primary listing, data sample, forensic report or official statement is included, the central claim remains unverified.