-
Over 18 million records of US-based cryptocurrency users are being sold on the dark web, sourced from 20+ exchanges.
-
Sensitive data, including names, emails, and phone numbers, is available for $10,000, raising identity theft concerns.
-
Recent leaks, including data from Binance, Robinhood, Gemini and others, highlight ongoing security risks in the crypto space.
This alarming leak of over 18 million cryptocurrency user records raises critical concerns about the safety of digital assets and personal data.
Dark Web Sale: Crypto Data for $10,000 Exposes Millions
Dark Web Informer reported the leak on April 15, sparking concerns regarding the security of cryptocurrency users in the US.
“A threat actor is allegedly selling a large US-based cryptocurrency user database, sourced from multiple exchanges and platforms,” the post read.
For just $10,000, buyers can access detailed information, including full names, email addresses, phone numbers, and physical addresses. The data, sourced from prominent platforms, could potentially expose millions of users to identity theft and other cybercrimes.
The leaked data reportedly includes around 1.5 million Binance US phone records and 79,743 full records. In addition, 1.8 million records were from Crypto.com, 432,000 from Coinbase, 197,000 from Robinhood, 121,071 from Kraken, 800,000 from Gemini, and 76,710 from CoinMarketCap.
“We want to clarify that there has been no data leak from Binance’s systems. Our security team has been actively monitoring a known hacker on the Dark Web who collects data by compromising browser sessions on infected computers,” Binance told COINOTAG through an email.
Dark Web Informer shared a screenshot of the alleged sale listing, which also highlighted additional records from Ledger, Bitfinex, Coinmama, BearTax, USA Crypto Legacy, and others. The total dataset spans over 18 million lines of user information.
Dark Web Sale of Cryptocurrency User Data. Source: DarkWebInformer
This report follows another alarming disclosure by Dark Web Informer. The analyst revealed that a separate threat actor was selling crypto investor leads tied to Robinhood accounts across the US and Europe.
The affected countries included the Netherlands, Switzerland, France, Germany, Poland, Spain, and the UK. The listing featured data that was not publicly scraped, suggesting that the information was obtained through unauthorized access or breaches.
Robinhood Crypto Data For Sale on Dark Web. Source: DarkWebInformer
This is not the first time such warnings have surfaced. COINOTAG previously reported that someone was selling the crypto user database from Ledger, Gemini, and Robinhood. Similarly, last month, the news emerged that over 230,000 combined user records from Binance and Gemini had reportedly been listed for sale on the dark web.
The continuous exposure of crypto users’ personal data stresses the urgent need for heightened security measures within the industry. Investors should enable two-factor authentication, use unique passwords, and remain vigilant against unsolicited communications that may attempt to harvest credentials.
Conclusion
The sale of extensive user data on the dark web underscores significant vulnerabilities in the cryptocurrency sector. As threats multiply, both users and exchanges must prioritize security measures such as robust authentication practices and cybersecurity training to mitigate risks and protect sensitive information.
