Bitmain Data Breach
The 2020 Bitmain data breach involved the unauthorized compromise and distribution of customer delivery and order records from Bitmain (bitmain.com), the global market leader in ASIC cryptocurrency mining hardware (Antminer).
Exposed Data Types
5- Email addresses
- Names
- Phone numbers
- Physical addresses
- Geographic locations
About This Breach
The exposed dataset contains shipping, contact, and account records of international hardware customers.
What information was affected in the Bitmain incident?
The leaked customer shipping export (bitmain.csv) contains transactional shipping information for hardware purchasers worldwide. The breach impacted 77,366 unique customers, exposing the following categories of sensitive data:
- Identity & Account Details: Customer full names and registered platform usernames.
- Contact Credentials: Canonical email addresses and telephone numbers (primary and alternate numbers).
- Physical Delivery Data: Complete shipping street addresses, recipient cities, postal codes, and country codes.
How many accounts were affected?
Systematic canonical extraction and deduplication confirmed 77,366 unique canonical customer email addresses across 102,095 total raw shipping entries.
Technical analysis and security risks
The dataset represents an exfiltrated order fulfillment table from Bitmain's global sales pipeline. In the cryptocurrency sector, the public association of physical addresses and phone numbers with cryptocurrency mining equipment poses severe real-world security risks, including SIM swapping, targeted spear-phishing attacks impersonating hardware warranty support, and physical extortion targeting high-value miners.
Recommended actions for affected users
Customers who have purchased products from Bitmain should:
- Immediately transition away from SMS-based two-factor authentication to hardware security keys (FIDO/U2F) or time-based authenticator apps across all email and exchange accounts.
- Treat any unsolicited emails or calls regarding Antminer firmware patches, warranty extensions, or shipping customs issues as potential phishing scams.
- Review personal physical and operational security protocols for mining operations.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
