BitMart Crypto Exchange Breach Exposes 762,293 Users’ Emails and Phone Numbers

BitMart, the centralized cryptocurrency exchange serving more than 9 million users across 180+ countries, suffered a data breach that exposed 762,293 customer records. The leaked data, first surfaced on June 12, 2025, includes emails, phone numbers, registration dates, and geographic locations tied to BitMart accounts.

Why the BitMart Breach Is Dangerous

BitMart customers hold crypto assets, which makes them among the highest-value phishing targets on the internet. A leaked database linking email to phone number to registration country gives attackers a ready-made mailing list for highly personalized SIM-swap, smishing, and fake support scams. Even without passwords in the dump, the combination of PII is enough to launch devastating social engineering.

What Was Exposed in the BitMart Breach

• Email addresses
• Phone numbers
• Registration dates
• Geographic locations
• 762,293 unique user records

Why This Matters for Crypto Holders

Cryptocurrency accounts are irrevocable once drained. A well-timed phishing message impersonating BitMart support, sent to a verified email plus phone, can convince even careful users to authorize a fraudulent withdrawal or reveal 2FA codes. That is exactly the playbook that followed previous crypto exchange leaks like Celsius, Ledger, and 3Commas.

How the BitMart Database Breach Works

Database breaches at crypto exchanges typically stem from compromised admin credentials, unpatched web vulnerabilities, or exposed backups. Once the user table leaves the exchange, it is traded on Russian and English dark web forums, resold to phishing kit operators, and eventually combined with other leaks to produce combolists for crypto-focused credential stuffing.

Check If You Are Affected

If you have ever registered with BitMart, assume your email and phone are in criminal hands. Enable hardware-key 2FA, rotate any password shared with BitMart, and search HEROIC.com's database of over 400 billion exposed records to confirm whether your BitMart credentials appear in this breach or any linked crypto leak.