Crypto exchange HTX is facing an unverified claim that a threat actor obtained a database containing more than 6.5 million user records. Dark Web Intelligence reported the allegation on Sept. 9 at approximately 16:46 UTC, publishing a small sample that the threat actor presented as evidence. The reported database structure includes fields for email addresses, phone information, account identifiers, user status, passwords, money passwords, Google authentication and KYC-related data. Those field names do not establish that usable passwords, Google Authenticator secrets or KYC documents were exposed, since fields may be encrypted, hashed, empty or otherwise unusable. Records in the sample reportedly carry 2026 timestamps, but that does not establish when the data was obtained or whether it originated directly from HTX. The claimed 6.5 million-record total has not been independently verified, and the sample cannot show whether the database is complete, authentic or assembled from older material. HTX, formerly known as Huobi, has not been shown confirming the claim. The Crypto Times said it contacted HTX and was awaiting a response. The allegation follows an Aug. 31 DDoS attack that Justin Sun said affected services without compromising user funds, as well as earlier security changes involving distributed and rotating hot-wallet withdrawal addresses. HTX previously faced a separate 2023 data-security incident involving 4,960 users, but there is no evidence linking it to the newly advertised database. Confirmation will require technical verification or a response from HTX.