Over 3 Million CoinMarketCap Email Addresses Leaked to Dark Web: Report

The addresses are trading on “hacking forums,” haveibeenpwned reported. CoinMarketCap acknowledges “correlation” with its subscriber base but maintains its servers weren’t breached.

By Sebastian Sinclair

Oct 25, 2021 at 1:29 a.m. UTC

Updated Oct 25, 2021 at 9:23 p.m. UTC

Sebastian Sinclair

Sebastian Sinclair is a CoinDesk news reporter based in Australia.

Follow @Sebsinclair1989 on Twitter

Millions of email addresses associated with the crypto market data website CoinMarketCap (CMC) have reportedly been compromised.

According to the data security breach website haveibeenpwned, 3.1 million addresses are now trading on “hacking forums.”

CMC said Saturday it had become aware that batches of data had shown up online “purporting to be a list of user accounts.” It is unclear how the addresses were obtained. The website, owned by leading global crypto exchange Binance, also said only addresses and not passwords had been exposed though it discovered a “correlation” and warned users to use separate and unique passwords across multiple sites.

“At this point in our investigation, we’ve come to the conclusion that the leak did not come from CoinMarketCap servers,” CMC said on its blog. “As no passwords are included in the data we have seen, we believe that it is most likely sourced from another platform where users may have reused passwords across multiple sites.”

CMC did not immediately respond to CoinDesk’s request for comment.

UPDATE (Oct. 24, 14:40 UTC): Adds clarifying language throughout, removes redundant sentence attributed to anonymous source.

Read more about

CoinMarketCap Data Security Email

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.