- One of Europe’s long-time exchanges for Bitcoin, Bitcoin24.eu, just got hit and the threat actor is allegedly boasting of selling the platform’s database.
- The advertised dataset reportedly contains approximately 653,145 records and is sold privately through Telegram.
- According to Daily Dark Web, the authenticity of the alleged database has no independent verification, and no confirmation from Bitcoin24’s systems at the moment.
The alleged breach attack on Bitcoin24.eu (Bitcoin-24) just raised fresh concerns about the long-term risks posed by historical data breaches.
Daily Dark Web reported the alleged sale after flagging it in an underground cybercrime forum. According to the listing, sample data is available only through private Telegram conversations.
Cybersecurity experts warn that older cryptocurrency databases can remain valuable to cybercriminals for years. This hits differently when they contain personal information that can morph easily with newer data leaks.
Earliest Bitcoin Exchanges Under Jeopardy
Bitcoin24.eu launched in 2012. During the early years of cryptocurrency adoption, it quickly became one of Europe’s largest Bitcoin exchanges by euro trading volume. The platform gained popularity among users seeking to buy and sell Bitcoin before the crypto industry blew up.
In 2013, the exchange faced significant legal and financial challenges after authorities seized funds linked to its operator due to alleged money laundering activities. The incident crashed its operations with thousands of users unable to access their funds. Bitcoin24 no longer operates. However, customer information collected during its years of activity still retains value.
Cybersecurity professionals say threat actors often go after historical records. These include names, email addresses, usernames, and contact details. Threat actors frequently combine older datasets with newly leaked information to build detailed victim profiles. That way, they make phishing emails and social engineering attacks significantly more convincing.
The value of historical user data is evident across platforms; adult sites like BannedGFs.com have also been targeted, with alleged breaches exposing sensitive user records.
Security researchers note that credential stuffing attacks also remain a concern, particularly if users reuse passwords across multiple online services.
Researchers Urge Caution Until Claims are Verified
Daily Dark Web emphasized that it has not independently verified the authenticity of the alleged database or confirmed whether the information is from Bitcoin24. Yet, cybersecurity experts caution that users of the exchange and its services should treat the underground marketplace listings carefully.
Analysts recommend that users who previously maintained accounts with Bitcoin24 remain vigilant. Those who still reuse passwords from older cryptocurrency accounts should immediately update them.
If you have profiles that support multi-factor authentication (MFA), enable them wherever possible. Also, monitor email accounts for suspicious login attempts or phishing campaigns.
Security professionals also advise users to be cautious of unsolicited messages claiming to offer account recovery services. They can even request wallet credentials. Don’t fall for it because threat actors frequently exploit news surrounding alleged cryptocurrency breaches.
As of publication, there is no evidence confirming that Bitcoin24.eu has suffered a newly verified data breach. However, the alleged sale serves as another reminder that historical databases (even from long-defunct cryptocurrency exchanges) can continue circulating on cybercrime forums years after a platform has ceased operations, creating ongoing risks for former users.
