A reported 18 million US cryptocurrency users' data seems to be available for purchase on the dark web, raising concerns about the safety of personal information within the digital currency realm.
The information comprises sensitive details gathered from over 20 significant cryptocurrency trading platforms and exchanges.
Reported by Dark Web Informer on April 15, the exposed data has caused worries about the security of US cryptocurrency users. The online post mentioned that a threat actor is purportedly selling a vast cryptocurrency user database based in the US, collected from various platforms and exchanges.
For $10,000, potential buyers can acquire extensive data, such as full names, email addresses, phone numbers, and physical addresses. This data, sourced from well-known platforms, has the potential to expose millions of users to identity theft and cybercrimes.
The leaked information reportedly includes phone records from approximately 1.5 million Binance US users, 79,743 full records, 1.8 million records from Crypto.com, 432,000 from Coinbase, 197,000 from Robinhood, 121,071 from Kraken, 800,000 from Gemini, and 76,710 from CoinMarketCap.
Binance addressed the situation, clarifying that there had been no data breach from their systems. They emphasized that their security team has been actively monitoring a hacker on the Dark Web who acquires data through compromised browser sessions on infected devices.
Dark Web Informer also shared a screen capture of the alleged data sale post highlighting additional information from Ledger, Bitfinex, Coinmama, BearTax, USA Crypto Legacy, among others. The dataset reportedly contains over 18 million lines of user details.
Additionally, another disclosure from Dark Web Informer revealed that a different threat actor was selling leads of crypto investors linked to Robinhood accounts in the US and Europe countries including the Netherlands, Switzerland, France, Germany, Poland, Spain, and the UK. The information in the listing was not publicly available, suggesting it was obtained through unauthorized means.
This is not the first instance of such alerts. Previous reports indicated the sale of user databases from Ledger, Gemini, and Robinhood, while news surfaced last month about over 230,000 combined user records from Binance and Gemini being listed for sale on the dark web.
With repeated incidents of crypto user data exposure, it emphasizes the critical need for enhanced security practices in the industry. Investors are advised to use two-factor authentication, unique passwords, and to remain cautious regarding unsolicited communications that may attempt to extract credentials.