Excerpt from Decrypt Article, Published on Sep 25, 2024.
A dark web post by a user named “FireBear” has raised alarms by claiming to have leaked personal data of 12.8 million Binance customers, including sensitive information such as names, emails, phone numbers, and physical addresses. The post, which appeared on a breach-related forum, offered the data for sale and provided a partially obscured sample. Despite these claims, Binance has strongly refuted the allegations, stating that after a thorough investigation, no data leak from their platform occurred.
Binance’s spokesperson confirmed, “This is false. Our security team has looked into the claims, and we can confirm that this is not a Binance data leak.” While Binance asserts that the allegations are baseless, cybersecurity experts still urge caution. Fake claims like these can sometimes precede phishing attacks and account takeovers, as scammers attempt to capitalize on users’ fears.
Cybersecurity researcher Oz Tamir noted that incidents like these, whether real or fake, often act as precursors to fraudulent activities targeting unsuspecting users. He advised Binance users to enable two-factor authentication and remain vigilant against suspicious communications. Phishing campaigns that impersonate trusted entities, such as Binance, are common tactics used to trick users into handing over account control.
Further weighing in, Harry Halpin, CEO of Nym Technologies, highlighted the broader issue of data storage, advocating for cryptographic solutions that eliminate the need to store user data. Even with robust security, Halpin warns, there’s always a risk of hacking or insider leaks.
Despite the circulating claims, industry experts, including Luciano Ciattaglia from Hacken, expressed skepticism, emphasizing that Binance’s security protocols are among the most advanced, making a leak unlikely.
To delve deeper into this topic, please read the full article on Decrypt.
