A significant data breach has sent shockwaves across the cryptocurrency community, as a threat actor is allegedly selling a vast U.S.-based crypto user database on a dark web forum. The leaked trove reportedly contains over 18 million records collected from more than 20 well-known cryptocurrency platforms and services.
According to the listing, the stolen data includes personally identifiable information (PII) such as names, email addresses, phone numbers, residential addresses, and other sensitive details. The complete package is being offered for Rs 8,35,000, sparking concerns of identity theft, phishing attacks, and large-scale financial fraud.
A partial breakdown of the breach reveals the inclusion of user data from several high-profile platforms:
- Binance US – 1.4 million+ records
- Crypto.com – 1.8 million+ records
- Coinbase– 432,000+ records
- Gemini– 800,000+ records
- Robinhood– 197,000+ records
- Kraken – 121,000+ records
- Ledger – 20,000 public and 34,000 private records
- Coinmarketcap– 76,000+ records
- Other affected services include Bitfinex, Coinmama, BearTax, and several more.
Security experts are currently working to verify the authenticity and extent of the leak, though the claimed volume and platform diversity suggest a highly coordinated data aggregation or compromise effort. The leak, if confirmed, could mark one of the most significant crypto-related data exposures to date.
ALSO READ: Call for Chapters: Contribute to the Book “Cyber Crime – From Theory to Practice”
Users of the mentioned platforms are urged to monitor their accounts closely, enable two-factor authentication, and remain vigilant against unsolicited communications. Industry leaders and law enforcement agencies are expected to launch investigations into the incident and assess potential risks to user privacy and platform security.