Binance takes action against FUD after users claim KYC leaks on the dark web

Contents

There were increasing reports that Binance’s user data had been leaked on the dark web.
As a result, sentiment surrounding the BNB token plummeted.

Binance [BNB]one of the largest crypto exchanges in the world, has gone through a slew of problems in recent months.

Adding to the list of problems, Binance recently faced allegations that its user data was leaked on the dark web.

Binance data breaches

Sensitive material related to Binance, including code and internal passwords, was allegedly leaked on GitHub and remained publicly accessible for an extended period of time.

The material, posted by the account ‘Termf’, consisted of code, infrastructure diagrams, internal passwords and technical information.

Even more worrying, the exposed code appeared to include Binance’s security measures, including passwords and multi-factor authentication (MFA).

The leaked information included passwords for systems labeled “prod,” indicating possible use on the live site rather than in development or demonstration environments.

Last week, Binance filed a copyright takedown notice, resulting in the data being removed from GitHub, confirming that the exposed material contained the exchange’s proprietary code.

However, things became murkier when many users pointed out that Binance’s KYC information was being sold on the dark web. Users’ basic personal information was also reportedly sold on various networks.

So don’t get confused regarding Binance because we are talking about two different things being sold:

1. Basic data (name, nationality, telephone number); data is real, it was confirmed: https://t.co/XZ9jGQpoS2

2. Complete KYC data via access to law enforcement systems:…

— CR1337 (@cryptonator1337) February 4, 2024

Damage control

In an attempt to dispel FUD surrounding this issue, the Binance team responded to one of the tweets, claiming that their security team had thoroughly evaluated the situation, as is common with potential threats.

They confirmed the absence of leaks in Binance’s systems and assured users that their accounts remained safe.

The statement also highlighted the different layers of defense used, including MFA, biometrics, authentication tools and more.

Our security team reviewed this – as they do with all potential threats – and confirmed that there is no such breach in Binance’s systems. User accounts remain secure.

Accounts are secured through many defenses including MFA, biometrics, authentication tools, etc.

As always, we…

— Binance Customer Support (@BinanceHelpDesk) February 4, 2024