BitMarch Data Breach
The BitMart 2021 data breach represents an unauthorized extraction of customer database records from BitMart (bitmart.com), a premier centralized cryptocurrency exchange catering to over 9 million traders across 180+ jurisdictions.
Exposed Data Types
4- Email addresses
- Phone numbers
- Geographic locations
- IP addresses
About This Breach
The exposed records comprise historical customer registrations dating through April 30, 2021, and were publicly released across dark web forums in July 2025 by threat actor @Satanic.
What information was affected in the BitMart incident?
The leaked customer export exposes verified trader records across global digital asset markets. The incident compromised 762,305 unique user accounts, exposing the following categories of personal information:
- Contact Credentials: Canonical email addresses and international mobile telephone numbers.
- Geographic Telemetry: Country of registration and broader geographic region (Americas, Europe, Asia, etc.).
- Network Identifiers: Recorded registration and session IP addresses.
- System Identifiers & Timestamps: Internal exchange user identifiers (user ID) and account creation timestamps.
How many accounts were affected?
Rigorous deduplication and RFC canonical verification confirmed 762,305 unique canonical email addresses across 1,215,050 raw trader records.
Technical analysis and security risks
The exposure of cryptocurrency investor emails alongside direct phone numbers and geographical locations creates extreme exposure to high-yield social engineering attacks. Compromised traders face severe threats from SIM swapping, counterfeit exchange support outreach via Telegram/WhatsApp, and fraudulent asset recovery schemes designed to siphon wallet credentials.
Recommended actions for affected users
Individuals who maintained accounts on BitMart should:
- Immediately transition from SMS-based two-factor authentication to application-based TOTP (Google Authenticator) or physical hardware security keys (FIDO/YubiKey).
- Configure or refresh Anti-Phishing security codes within BitMart account settings.
- Disregard any unsolicited communications claiming to assist in asset recovery, account auditing, or regulatory compliance verification.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
