Recently, the dark web community has been buzzing. Someone posted an ad on a Russian forum claiming to sell "internal customer service backend access" for a major exchange, asserting they can freely view user data within the exchange's customer service system.

According to the screenshots, this access seemingly allows viewing everything—user identity verification documents, complete transaction history, customer service ticket contents. Although labeled as "read-only access," if this is true, the consequences could be severe. A large-scale leak of user privacy would cause a huge uproar.

However, it should be clarified that security experts point out that such "backend access" in the dark web black market usually refers to internal accounts that can log into customer service systems like Zendesk or Salesforce. If these fall into the wrong hands, they could be used for social engineering or phishing scams with ease. The seller is offering it at a particularly low price. How to interpret this—whether the deal is genuine or not—is uncertain. Perhaps it's just a bait or a phishing lure.

But the problem is, once this information was exposed, it spread rapidly online, and the security defenses of top global exchanges instantly became the target of criticism.

Nick Percoco, the Chief Security Officer of a major exchange, later came forward to debunk the rumors, stating that these claims are misleading information...