Hackers claimed the theft of 335.9 million records with Binance customer data.
The attackers demanded $900,000 for non-disclosure of the information.
The exchange found no signs of a breach and called the data sale listing likely fraud.
The cryptocurrency exchange Binance denied reports of a possible data leak affecting 335.9 million users. Platform representatives stated that a preliminary review found no signs of compromise of internal infrastructure or customer information.
Earlier, cybersecurity specialists drew attention to a listing for the sale of a database that likely belongs to Binance. Responsibility for the leak was attributed to the hacker group ShinyHunters.
According to the attackers' claims, the obtained information covers users from approximately 170 countries and includes email addresses, phone numbers, passwords, identity documents, transaction history, and private keys of crypto wallets.
For non-disclosure of the information, the sellers demanded $900,000 in bitcoin or Monero. At the same time, the authenticity of the published data samples has not received independent confirmation.
Binance stated that it examined the available information and found a number of inconsistencies. In particular, the company does not store user passwords in plaintext and does not hold the private keys of their external wallets.
In addition, the purported database contains information about customers from jurisdictions where the exchange no longer provides services. According to Binance representatives, the information could have been collected by malware from individual users' devices, or the listing could have been fraudulent from the start.
The exchange continues its investigation, but as of publication had found no evidence of compromise of its systems, customer credentials, or internal infrastructure.
Recall that the crypto exchange Coinbase also previously denied a breach of its own infrastructure after reports of a leak of information on more than 70,000 users. At the same time, the company confirmed an incident at third-party analytics provider Amplitude that affected some customer contact data.