The MtGox 2014 data leak contains customer balance and transaction data from MtGox up to early 2014. While unofficial, many users have verified the accuracy of their data in the leak and used it to recover balances, verify transaction history, or aid in rehabilitation claims.
⚠️ Malware Warning:
The archive contains an executable (TibanneBackOffice.exe) confirmed to be wallet-stealing malware.
Do not run any.exeor.appfiles from the archive. Stick to the safe extraction process below.
- 🔍 Step 1 – Identify Your UUID
- 📦 Step 2 – Manually Download & Extract the Leak (Safely)
- 🔎 Step 3 – Manually Search for Your Data
- ⚙️ Automated Workflow (Optional)
- 📂 Zip File Contents Overview
- 🗃️ File Structure Overview
- 📚 Additional Reading & Community References
You’ll need your MtGox User UUID to search the leak for your data.
-
Search your inbox for:
[Mt.Gox] Account creation confirmation -
Look for a URL like:
https://mtgox.com/signup/validate?ID=<your-user-uuid>&Code=<...> -
Extract the value from the
ID=parameter. This is your UUID (e.g.,1111aaaa-bbbb-cccc-dddd-eeeeeeffffff).
-
Download the leak archive from Archive.org:
📦 https://archive.org/details/MtGox2014Leak -
Extract only the following files to avoid malware:
mkdir -p extracted # Step 1: Extract selected ZIPs (do not extract full archive) unzip -j MtGox2014Leak.zip \ 'backoffice/Exports/btc_xfer_report.zip' \ 'backoffice/Exports/mtgox_balances.zip' \ 'trades.zip' \ -d extracted # Step 2: Extract contents of the ZIPs unzip extracted/btc_xfer_report.zip -d extracted/btc_xfer_report unzip extracted/mtgox_balances.zip -d extracted/mtgox_balances unzip extracted/trades.zip -d extracted/trades # Step 3: Remove intermediary ZIPs (optional) rm extracted/*.zip
Once you've extracted the files, use your UUID to manually search for matches in the data:
UUID="<your-user-uuid>"
# Find all files that mention your UUID
rg -l "$UUID" extracted/ | while read -r file; do
echo "==== $file ===="
if [[ "$file" == *mtgox_balances ]]; then
head -n 4 "$file" # mtgox_balances has a 4-line SQL-style header
else
head -n 1 "$file" # CSV files have a 1-line header
fi
echo "--- matches ---"
rg -N "$UUID" "$file" # Show matching lines
echo ""
doneYou can also search for a wallet UUID (e.g., from a matching row in
mtgox_balances) to find related transfers inbtc_xfer_report.csv.
⚠️ Important Note:
I wrote the following scripts primarily for personal use.
If you choose to use them, please read them first and make sure you understand everything they do.
Never run random scripts from the internet without verifying them yourself.
These scripts help automate the safe download, extraction, and filtering of the leak:
- 📄 Commit with context: https://github.com/0xdevalias/dotfiles/commit/cabb69fe583febf4e8b651523f65af3d8ee713d4
- 🔻 Download and extract the leak safely: https://github.com/0xdevalias/dotfiles/blob/devalias/bin/mtgox_leak_download
- 🔍 Filter extracted data for your UUID: https://github.com/0xdevalias/dotfiles/blob/devalias/bin/mtgox_leak_filter
These tools use ripgrep and shell scripting to efficiently extract and summarize relevant records across multiple files.
To help with manual inspection and safe extraction, here are the full contents of the relevant ZIP archives from the MtGox2014Leak.
⚠️ Do not extract or run any executable files, especially:backoffice/Bin/TibanneBackOffice.zipThis archive contains malware. Focus only on the ZIPs listed below.
⇒ unzip -l MtGox2014Leak.zip
Archive: MtGox2014Leak.zip
Length Date Time Name
--------- ---------- ----- ----
0 03-07-2014 17:17 backoffice/
0 03-09-2014 23:10 backoffice/Bin/
196780 03-09-2014 23:10 backoffice/Bin/screenshot.png
10756809 03-09-2014 23:16 backoffice/Bin/TibanneBackOffice.zip
0 03-07-2014 17:18 backoffice/Docs/
153 03-07-2014 18:07 backoffice/Docs/btc_xfer_total_summary.txt
1038 03-09-2014 00:37 backoffice/Docs/trades_summary.txt
93237 03-05-2014 19:42 backoffice/Docs/CV-Mark_Karpeles_20100325.pdf
1239 03-07-2014 18:17 backoffice/Docs/home_addresses.txt
0 03-07-2014 17:19 backoffice/Exports/
11452079 03-07-2014 16:48 backoffice/Exports/mtgox_balances.zip
105622705 03-07-2014 16:46 backoffice/Exports/btc_xfer_report.zip
622555932 12-14-2013 12:19 trades.zip
--------- -------
750679972 13 files⇒ unzip -l extracted/btc_xfer_report.zip
Archive: extracted/btc_xfer_report.zip
Length Date Time Name
--------- ---------- ----- ----
367479311 03-04-2014 19:47 btc_xfer_report.csv
--------- -------
367479311 1 file⇒ unzip -l extracted/mtgox_balances.zip
Archive: extracted/mtgox_balances.zip
Length Date Time Name
--------- ---------- ----- ----
43556887 03-01-2014 21:41 mtgox_balances
--------- -------
43556887 1 file⇒ unzip -l extracted/trades.zip
Archive: extracted/trades.zip
Length Date Time Name
--------- ---------- ----- ----
0 03-02-2014 03:10 trades/
4737285 04-22-2012 17:00 trades/2011-04.csv
2304167 02-15-2013 02:49 trades/2011-04_mtgox_japan.csv
11211955 04-22-2012 17:05 trades/2011-05.csv
37687837 04-22-2012 17:23 trades/2011-06.csv
46250487 04-22-2012 17:30 trades/2011-07.csv
51044625 04-22-2012 17:37 trades/2011-08.csv
57376861 04-22-2012 17:31 trades/2011-09.csv
60515551 04-22-2012 17:35 trades/2011-10.csv
51811857 04-22-2012 17:28 trades/2011-11.csv
53180155 04-22-2012 17:29 trades/2011-12.csv
97138408 04-22-2012 17:54 trades/2012-01.csv
83874994 04-22-2012 17:46 trades/2012-02.csv
57999904 04-22-2012 17:32 trades/2012-03.csv
47268963 06-21-2012 03:20 trades/2012-04.csv
25126579 06-21-2012 03:09 trades/2012-05.csv
47327765 12-20-2012 18:47 trades/2012-06.csv
45764944 04-18-2013 18:08 trades/2012-07.csv
90203984 12-20-2012 19:27 trades/2012-08.csv
39514367 12-20-2012 18:51 trades/2012-09.csv
43193679 12-20-2012 18:51 trades/2012-10.csv
5275898 12-13-2013 18:33 trades/2012-11_coinlab.csv
45377534 12-13-2013 18:33 trades/2012-11_mtgox_japan.csv
19173998 12-13-2013 18:42 trades/2012-12_coinlab.csv
55764000 12-13-2013 18:42 trades/2012-12_mtgox_japan.csv
24850105 12-13-2013 18:52 trades/2013-01_coinlab.csv
71694878 12-13-2013 18:52 trades/2013-01_mtgox_japan.csv
5373405 03-17-2013 20:29 trades/2013-02-12_coinlab.csv
16708512 03-17-2013 20:29 trades/2013-02-12_mtgox_japan.csv
4440843 03-17-2013 20:26 trades/2013-02-19_coinlab.csv
13545409 03-17-2013 20:26 trades/2013-02-19_mtgox_japan.csv
3429468 03-17-2013 20:24 trades/2013-02-26_coinlab.csv
13067598 03-17-2013 20:24 trades/2013-02-26_mtgox_japan.csv
30185281 12-13-2013 19:11 trades/2013-02_coinlab.csv
92816360 12-13-2013 19:11 trades/2013-02_mtgox_japan.csv
4496151 03-17-2013 20:41 trades/2013-03-05_coinlab.csv
21783243 03-17-2013 20:41 trades/2013-03-05_mtgox_japan.csv
4433986 03-25-2013 04:57 trades/2013-03-12_coinlab.csv
18810882 03-25-2013 04:57 trades/2013-03-12_mtgox_japan.csv
7108560 04-04-2013 19:15 trades/2013-03-19_coinlab.csv
28010385 04-04-2013 19:15 trades/2013-03-19_mtgox_japan.csv
5996966 04-04-2013 19:00 trades/2013-03-26_coinlab.csv
23953136 04-04-2013 19:00 trades/2013-03-26_mtgox_japan.csv
37771747 12-13-2013 20:19 trades/2013-03_coinlab.csv
158118948 12-13-2013 20:19 trades/2013-03_mtgox_japan.csv
25193181 05-07-2013 16:07 trades/2013-04.zip
84687948 12-14-2013 01:19 trades/2013-04_coinlab.csv
394238494 12-14-2013 01:19 trades/2013-04_mtgox_japan.csv
60242329 12-13-2013 22:37 trades/2013-05_coinlab.csv
244629079 12-13-2013 22:37 trades/2013-05_mtgox_japan.csv
35031662 12-13-2013 20:50 trades/2013-06_coinlab.csv
148447467 12-13-2013 20:50 trades/2013-06_mtgox_japan.csv
32261464 12-13-2013 21:01 trades/2013-07_coinlab.csv
118276355 12-13-2013 21:01 trades/2013-07_mtgox_japan.csv
25022241 12-13-2013 20:26 trades/2013-08_coinlab.csv
79282641 12-13-2013 20:26 trades/2013-08_mtgox_japan.csv
29630047 12-13-2013 20:27 trades/2013-09_coinlab.csv
90388892 12-13-2013 20:27 trades/2013-09_mtgox_japan.csv
29261484 12-13-2013 20:51 trades/2013-10_coinlab.csv
105268748 12-13-2013 20:51 trades/2013-10_mtgox_japan.csv
69680116 12-13-2013 23:57 trades/2013-11_coinlab.csv
283568463 12-13-2013 23:57 trades/2013-11_mtgox_japan.csv
--------- -------
3520832271 62 filesSQL dump of wallet balances at the time of export.
mysql> SELECT * FROM platform.User_Wallet WHERE platform.User_Wallet.Balance != 0 ORDER BY platform.User_Wallet.Balance DESC;
+--------------------------------------+--------------------------------------+------------+---------------+-------------+---------+---------+----------------------+------------------------+----------------+---------------------+
| User_Wallet__ | User__ | Currency__ | Balance | Liabilities | Index | Backend | Daily_Withdraw_Limit | Monthly_Withdraw_Limit | Disable_Limits | Stamp |
+--------------------------------------+--------------------------------------+------------+---------------+-------------+---------+---------+----------------------+------------------------+----------------+---------------------+
Ledger of BTC deposits, withdrawals, and internal transfers.
Wallet,Entry,Date,Operation,Amount
Trade history logs in CSV format per month. File sizes often range from 100MB to 400MB.
Trade_Id,Date,User_Id,User,User_Id_Hash,Japan,Type,Currency,Bitcoins,Money,Money_Rate,Money_JPY,Money_Fee,Money_Fee_Rate,Money_Fee_JPY,Bitcoin_Fee,Bitcoin_Fee_JPY,User_Country,User_State