Dark Web Intel: 27,684 Credentials From the B91 Blockchain Database Dump

HEROIC analysts recieved intelligence on the B91 breach after database dump chatter surfaced on dark web forums in early 2020. The incident, which occured in February 2020, exposed 27,684 records from the Chinese blockchain services directory, including email addresses, usernames, IP addresses, and bcrypt-hashed passwords.

How Exposed Blockchain Platform Credentials Enable Targeted Attacks

Users of blockchain service directories are partcularly attractive targets for sophisticated threat actors. With email addresses and usernames in hand, attackers can craft highly targeted spear-phishing messages impersonating blockchain projects, wallet providers, or crypto exchanges, potentially leading victims to hand over far more valuable credentials or private keys.

What Was Exposed in the B91 Breach

• Email Address
• Password Hash
• Username
• IP Address

Why the B91 Breach Matters to the Blockchain Community

Blockchain and cryptocurrency users face a beleive-nothing threat environment where every credential compromise can cascade into financial losses. The B91 breach is a reminder that even platforms with bcrypt password protection can fail to secure the surrounding user data, and that IP addresses and usernames alone are enough for attackers to build a convincing dossier for social engineering.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to stored user records, typically through SQL injection, server misconfigurations, or compromised admin credentials. The extracted data is then packaged and sold or shared on underground forums and Telegram channels, where it circulates and gets layered with data from other leaks.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across 400 billion-plus records to tell you exactly what information has been compromised. Run a free scan now to find out if your credentials appeared in the B91 breach or any other known database dump.