In November 2025, a threat actor began offering a dataset for sale on a cybercrime forum, claiming it contains user data from various Solana ecosystem platforms, including Pump.fun. The actor alleges the data was collected within the last 60 days and has been de-duplicated. This report, from Daily Dark Web, indicates that the information includes email addresses.
The alleged compromise involves 218,000 email addresses in total across all platforms, with 75,000 specifically attributed to Pump.fun. The source does not specify any other types of data that may have been compromised, nor does it provide information about the number of affected individuals beyond the email count. Pump.fun has not publicly confirmed this data breach.
Details surrounding this potential data breach may emerge over time, and official notices can be delayed.