Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Binance

binance.com

Binance was listed on the ShinyHunters leak site on Nov 1, 2026. Information as of Nov 1, 2026.

Updated continuously ยท figures as of Nov 1, 2026
Claimed by
ShinyHunters
First listed
Nov 1, 2026
Claims recorded
1

Leak-Site Claim.

ShinyHuntersConfirmed claim
Posted on the leak site
Nov 1, 2026
Collected by Brandefense
Nov 1, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Threat actor claiming to possess 335.9 million records stolen from Binance, including crypto assets in hot wallets, internal infrastructure data, private keys, user KYC documents, account passwords, emails, phone numbers, and transaction histories. Attacker demanding $500,000 ransom with explicit threat to leak data if payment not received. Data allegedly separated by country of origin (170+ countries). Contact handles provided: @reyswap, @yukarri_blonde, @egisasa. Threat actor identifies as ShinyHunters.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Instructure Holdings, Inc.
instructure.com
ShinyHuntersUSUnited StatesFinancial ServicesNot stated
Vercel Inc.
vercel.com
ShinyHuntersUSUnited StatesHosting Service ProvidersNot stated
Ministry of Education and Training (Vietnam)
moet.gov.vn
ShinyHuntersVNVietnamHealthcareNot stated
Abaco Informatica
abaco-informatica.com.ar
ShinyHuntersARArgentinaTechnologyNot stated
Correios
correos.es
ShinyHuntersESSpainTransportation and LogisticsNot stated
Ticketmaster
ticketmaster.com
ShinyHuntersUSUnited StatesMedia and EntertainmentNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
System Soft
systemsoft.info
Vexy-ransomwareBGBulgariaTechnologyNot stated
Rapid Manufacturing
rapidmfg.com
AuroraUSUnited StatesTechnologyNot stated
NOVADATA
novadata.com.ar
The GentlemenARArgentinaTechnologyNot stated
Aliqout Association
aliquot.com
GenesisUSUnited StatesTechnologyNot stated
corp-smart.com
corp-smart.com
EverstakeAEUnited Arab EmiratesTechnologyNot stated
rolly.io
rolly.io
WhitearmorUSUnited StatesTechnologyNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Nov 1, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.