This was not a single company breach, the credentials were harvested from millions of infected user devices using infostealer malware. Binance appeared in the dataset ...

Or at least it will, once I finish the slow process of documenting everything ...