User data from Ledger, Gemini, Robinhood leaked to dark web

Traders Union
All News
Crypto News
User-data-from-ledger

Spike in user data sales raises security concerns

This month has seen a surge in stolen user data from major crypto platforms appearing for sale on the Dark Web. The leaked records include:

- Full names

- Mailing addresses with ZIP codes

- Phone numbers

- Email addresses

- Other identifying details

The breach has raised serious concerns about cybersecurity across the crypto sector, which continues to battle escalating online threats.

Where did the data come from?

The X (formerly Twitter) account Dark Web Informer recently posted screenshots suggesting that a seller has detailed user information, including home addresses and phone numbers. Most of the affected users appear to be located in the United States, matching the primary user bases of Gemini and Robinhood.

“The threat actor claims to be selling U.S.-based crypto accounts from Ledger, Gemini, and Robinhood,” Dark Web Informer wrote. “Examples include full name, address, city, state, ZIP code, phone, email, country, etc.”

Loading...

The tweet was deleted by the author.

But we saved everything 🙂.

So far, none of the platforms mentioned have released official statements acknowledging a data breach.

Not the first incident

In 2021, Robinhood suffered a breach that exposed over 5 million email addresses and 2 million customer names. That hack was enabled through social engineering tactics that exploited a customer support employee.

Later reporting by BeInCrypto revealed that a similar leak affected over 100,000 users, with most of the compromised data belonging to U.S. users. A smaller portion of records included users from Singapore and the UK.

Experts point to phishing, not platform hacks

Dark Web Informer analysts believe these recent leaks were not the result of direct breaches in exchange systems. Instead, phishing attacks appear to be the likely cause. These attacks trick users into sharing sensitive data by impersonating trusted entities — suggesting that the exchanges themselves may not have been directly compromised.

Still, the scale of the leaks — affecting hundreds of thousands — highlights the continued vulnerability of users to such tactics. The rise of AI-driven scams, deepfakes, synthetic identities, and automated phishing has made these schemes more sophisticated and harder to detect.

“Be vigilant — your data may already be exposed,” warns Dark Web Informer.

BeInCrypto’s investigation also noted a rise in user complaints on X about phishing messages. Many users reported receiving spoofed messages appearing to be from Binance's official SMS ID, often used for authentication alerts.

Somehow, attackers managed to obtain users' phone numbers and mimicked legitimate security messages.

In response, Binance’s Chief Security Officer announced an upgrade to the platform’s anti-phishing code, which now includes SMS verification layers to prevent such incidents in the future.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.