A listing on a hacker forum, attributed to ShinyHunters, advertised 335.9 million lines of Binance user data covering roughly 170 countries, and the exchange now says it found no evidence of a systems breach. The seller demanded $900,000 in Bitcoin or Monero and threatened to leak the data if Binance did not pay.

The listing claims to include emails, phone numbers, passwords, ID documents, transaction histories and wallet private keys. Binance says it does not store passwords in plaintext, does not hold keys for users' external wallets, and that the listing references jurisdictions where it no longer operates. Similar past listings involved data stolen by malware from users' own devices.

Binance found no sign that KYC data, account credentials, private keys or internal infrastructure were compromised, and the investigation remains ongoing.

The claim is separate from the Oct. 29 attack on an internal wallet-signing service, which affected about $6.34 billion in assets. Binance urged users to watch for phishing and never share passwords, 2FA codes or seed phrases.