Alarming news has surfaced on the darknet once again: a hacker using the pseudonym AKM69 has announced the sale of a database containing personal information of more than 100,000 users of popular cryptocurrency exchanges Binance and Gemini. This was reported by the news resource Dark Web Informer, which specializes in tracking activity in the shadow segment of the Internet. The incident has caused a wave of discussions among crypto exchange users and cybersecurity experts, and has also made people think about how secure data is in the era of digital finance.
#### What is contained in the stolen database?
According to information published on Dark Web Informer, the database includes 100,000 records, each of which contains sensitive information about users. In particular, we are talking about full names, email addresses, phone numbers, and location data. Most of the victims are residents of the United States, but the database also contains records from Singapore and the United Kingdom. This data is a real treasure trove for attackers: it can be used for phishing attacks, blackmail, or even theft of cryptocurrency assets.
But this is not the only recent case. Just a day before AKM69's statement, another hacker, kiki88888, had already offered another Binance-related database for sale. It contained 132,744 email addresses and passwords of users. This suggests a possible coordinated attack on crypto exchange users or mass data collection from various sources.
#### Binance Reacts: Leak or Device Compromise?
Binance representatives were quick to reassure users that their platform had not been hacked. According to them, the compromised data was not the result of an internal leak. Instead, the company suggests that hackers could have collected information by hacking the users' devices. For example, infecting computers with malware or intercepting data through compromised browser sessions could have caused the leak. This version is also supported by a report from Dark Web Informer, which emphasizes that the data was stolen not directly from the exchange's servers, but from users' devices.
“Some of you need to stop clicking on random links,” Dark Web Informer concluded with a hint of sarcasm, pointing to user carelessness as one of the key reasons for such incidents.
#### How could this happen?
Cryptocurrency exchanges like Binance and Gemini are renowned for their security measures, including two-factor authentication (2FA) and data encryption. However, even the most robust systems are useless if the vulnerability is on the user’s side. Malware, phishing sites, fake apps, or even a careless attitude towards personal security are all opening the door for hackers. In the case of AKM69 and kiki88888, it is likely that we are talking about mass data collection through methods such as installing Trojans or intercepting credentials through fake login pages.
This incident is not the first in the history of the cryptocurrency market. In 2023, there were already cases of data leaks from users of various platforms, which highlights a systemic problem: the growing popularity of cryptocurrencies attracts not only investors, but also cybercriminals.
#### What should users do?
For those whose data may have fallen into the hands of hackers, the situation is alarming, but not hopeless. Cybersecurity experts recommend the following steps:
1. Change your passwords. If you use Binance or Gemini, update your credentials immediately, even if there is no direct evidence of compromise.
2. Check your devices. Scan your computer and phone for malware using a reliable antivirus.
3. Use 2FA. Make sure two-factor authentication is enabled and set up via the app, not SMS, as phone numbers may already have been compromised.
4. Be careful with emails and links. Avoid clicking on suspicious links and do not enter data on unverified sites.
5. Monitor your accounts. Regularly check your accounts for unauthorized transactions.
#### What to expect next?
Selling data on the dark web is just the first step. Phishing campaigns targeting affected users are likely to begin in the coming weeks. Attackers could send fake emails from Binance or Gemini, asking for “data verification” or offering to “restore access” to an account. Compromised phone numbers could also be used for SIM swapping attacks, which is especially dangerous for owners of large cryptocurrency portfolios.
For Binance and Gemini, this incident is yet another reputational challenge. While the companies will likely step up their efforts to educate users about security, the primary responsibility still falls on the people themselves. In a world where digital assets are becoming increasingly popular, cyber hygiene is becoming a necessity, not an option.
#### Conclusion
The leak of 100,000 Binance and Gemini users’ data is a loud signal that cybercrime is not standing still. Hackers like AKM69 and kiki88888 exploit not only the weaknesses of technology, but also the human factor. While cryptocurrency exchanges deny direct guilt, users should consider whether they are doing enough to protect their data. After all, a new lot has already appeared on the darknet, and who knows whose data will end up there tomorrow.
