Binance Denies Data Leak Claim Involving 1.5 Million Users

Binance disputes VECERT Analyzer’s claim of a 1.5 million user data leak, saying the sample shows only emails and plaintext passwords and likely results from malware on user devices.

Rich by Coin

2026-03-30

VECERT Analyzer reported that a private Binance user database—about 1.5 million records—was put up for sale. The incident was recorded on March 28, 2026. The dataset is linked to a threat actor using the handle PexRat. The claims describe a dataset containing both personal information and technical security data.

The case recalls a 2026 incident when researchers found malware-extracted data affecting hundreds of Binance accounts along with records from other major platforms. The dataset reportedly includes around 1.5 million records with personal and technical data, covering names, emails, phone numbers, country of registration, creation date, KYC status, IP addresses, user agents, login timestamps, and the type of two-factor authentication used. Threat actor PexRat has put up for sale a private database affecting approximately 1.5 million users.