Over 230,000 Binance and Gemini User Records Allegedly Leaked on Dark Web

In Brief:

Sensitive user data from Binance and Gemini listed for sale by dark web actors.

Records include names, emails, phone numbers, and locations—posing serious scam risks.

A large-scale data leak has reportedly exposed over 230,000 users of Binance and Gemini to serious cybersecurity risks. Listings on dark web forums this week claim to offer full personal records of users from both exchanges, raising concerns over rising phishing and fraud threats in the crypto sector.

According to the cybersecurity watchdog Dark Web Informer, a dark web user named AKM69 posted a database containing over 100,000 Gemini user entries on March 27. The leaked data includes full names, email addresses, phone numbers, and location details—mostly tied to U.S. users, with additional entries from Singapore and the UK.

“The database for sale reportedly includes 100,000 records... intended for marketing, fraud, or crypto recovery scams,” the report noted.

‍

Meanwhile, another actor, kiki88888, allegedly posted a separate trove of Binance user data a day earlier. That database reportedly holds 132,000 user entries, including login credentials, though no breach of Binance’s internal systems has been confirmed.

Experts suggest both leaks may stem from phishing or social engineering campaigns rather than a direct compromise of the exchanges.

Crypto users are increasingly vulnerable to targeted attacks. Impersonation tactics and deceptive ads are frequently used to lure users to fake login portals or extract sensitive information. Coinbase users lost over $46 million to similar scams this March alone.

Security firms like Scam Sniffer have reported that phishing-related losses exceeded $15 million in just the first two months of 2025.

As of writing, neither Binance nor Gemini has issued a public statement regarding the alleged breaches.

‍