All coverage
🚨🇧🇷 Vakinha customer dataset allegedly listed for sale A forum actor claims to be selling customer data allegedly obtained from Vakinha, a Brazilian crowdfunding platform. The listing advertises approximately 18,000 customer records dated July 7, 2026. The actor claims the data was extracted after gaining unauthorized access to an administrator account on Vakinha’s management portal. This claim
🚨🇯🇵 PeakManager customer dataset allegedly listed for sale A forum actor claims to have breached PeakManager, a Japanese reservation platform used by salons, clinics, and other appointment-based businesses, and extracted more than 32.5 million database rows. The seller says a deduplicated version contains approximately 6.1 million records. The listing also advertises PeakManager source code, ac
🚨🇲🇽 El Colegio de la Frontera Norte alumni dataset allegedly leaked A forum actor claims to have leaked a database tied to El Colegio de la Frontera Norte, a Mexican academic and research institution. The listing says the dataset contains information belonging to more than 4,000 former students. The allegedly exposed information includes full names, CURP identifiers, dates of birth, ages, gende
🚨🇧🇷 IBAPE-PR member records and professional documents allegedly leaked A forum actor claims to have breached the Instituto Brasileiro de Avaliações e Perícias de Engenharia do Paraná, an organization representing engineering appraisal and expert examination professionals in Paraná, Brazil. The post says more than 3,700 personal records and 2,080 document files were released for free. The mater
🚨🇲🇽 Michoacán Es Mejor citizen petition records allegedly leaked A forum actor claims to have leaked data from Michoacán Es Mejor, a citizen request and government services platform associated with the state of Michoacán, Mexico. A sample posted on the forum contains records involving public service requests and administrative procedures, including interactions with the state tax administration
🚨🇨🇴 Data from five Colombian government domains allegedly leaked A forum actor claims to have released an 897MB archive containing data obtained from five Colombian government domains. The listing advertises more than 1.1 million records, including 932,207 vehicle tax debtor entries, 175,742 court collection records, 41,276 judicial embargo orders, 12,734 tax retention certificates, and 977 med
🚨🇧🇷 Celso Lisboa University student and employee data allegedly leaked A forum actor claims to have breached Celso Lisboa University in Rio de Janeiro, Brazil, and released separate datasets containing personal information belonging to students and staff. The post advertises more than 51,200 student records and 2,223 employee records. The allegedly exposed information includes names, dates of b
🚨 AWS STS access tied to an unnamed telecommunications company allegedly listed for sale for $140,000. A forum actor claims to be selling AWS Security Token Service access associated with an unidentified telecommunications company reporting approximately $9 billion in revenue. The listing references 18 Amazon SQS queues, each allegedly processing or exposing up to 100,000 records per week. The se
🚨🇲🇽 Acomee customer dataset containing more than 17,000 records allegedly leaked A forum actor claims to have leaked data tied to Acomee, a Mexican distributor of telecommunications, networking, surveillance, and electrical equipment. The post advertises slightly more than 17,000 records. The allegedly exposed information includes names, RFC identifiers, email addresses, usernames, password fie
🚨🇸🇦 GulfJobs[.]com recruitment dataset containing approximately 872,000 records allegedly listed for sale A forum actor claims to be selling data tied to GulfJobs[.]com, a Saudi recruitment platform connecting employers with job candidates. The listing advertises approximately 872,000 entity and metadata records covering candidate contacts, profiles, job applications, authentication logs, and t
🚨🇻🇪 RDP access to unnamed Venezuelan equipment supplier allegedly listed for sale on a Russian speaking forum A forum actor claims to be selling remote access to the network of a Venezuelan company that supplies industrial, agricultural, and household equipment. The listing says the company has operated for more than 27 years, works with over 600 distributors, and maintains 20 authorized servic
🚨🌐 Coinbase session cookie checker and account takeover service advertised on a cybercrime forum A forum actor is advertising a bot that allegedly checks stolen Coinbase session cookies for account balances, provides access without valid email credentials, and supports rapid withdrawals using methods designed to evade antifraud systems. The listing also advertises 2FA removal for Coinbase, MEXC,
🚨🇫🇷 Alpissimo[.]fr user dataset containing approximately 600 records allegedly leaked A forum actor claims to have breached alpissimo[.]fr and released data allegedly obtained from the website. The listing advertises approximately 600 user records. A sample posted on the forum contains information submitted through the site, including names, email addresses, phone numbers, submission dates, and
🚨🇫🇷 SDIS de la Marne personnel data and documents allegedly leaked Forum actors ChimeraZ and Cybernox claim to have leaked a database and document archive tied to SDIS 51, the fire and rescue service for France’s Marne department. The post advertises 2,168 records covering 2,167 individuals, along with 1,021 files totaling approximately 700MB. The actors say the archive contains 1,020 documents
🚨🇫🇷 Three French fire and rescue services allegedly targeted in separate data leaks Forum actors ChimeraZ and Cybernox claim to have leaked data tied to SDIS 06 in Alpes-Maritimes, SDIS 40 in Landes, and SDIS 04 in Alpes-de-Haute-Provence. The SDIS 06 listing advertises 2,331 records covering 2,325 people and 15,833 files totaling 22.5GB. The SDIS 40 post references 241 records and 3,205 files
🚨🇳🇱 Netherlands contact dataset containing 14 million records allegedly listed for sale A forum actor claims to be selling a 2026 dataset containing approximately 14 million records tied to individuals in the Netherlands. The seller is asking 2,500 in an unspecified currency and says the dataset will be sold exclusively to one buyer. The allegedly exposed information includes names, dates of bi
🚨🇺🇸🇺🇸🇩🇪 Root CMS access to three major companies allegedly listed for sale A forum actor claims to be selling privileged CMS access tied to two unnamed US pharmaceutical and biotechnology companies and the German rail-freight division of a national railway. The three organizations reportedly generate approximately $84.4 billion in combined annual revenue. The listings advertise root access
🚨🇯🇵🇨🇦🇮🇱 Root CMS access to three government platforms allegedly listed for sale A forum actor claims to be selling privileged CMS access tied to Nara Prefecture’s Nara Super App in Japan, New Brunswick’s MyHealthNB platform in Canada, and Israel’s National Digital Agency. The listings advertise prices of $2,000 for Nara Super App, $10,000 for MyHealthNB, and $5,000 for the Israeli governmen
🚨🇬🇧 UK Department for Education contact records allegedly leaked A forum actor claims to have breached systems tied to the UK Department for Education and obtained data from its Help Portal and Turing Portal. The listing advertises approximately 600,000 parent and staff contact records from the Help Portal, along with around 7,000 additional records from the Turing Portal. Samples containing na
🚨🇬🇧 UK Police National Legal Database contact records allegedly leaked A forum actor claims to have breached the Police National Legal Database, a UK police information resource containing criminal justice legislation, case summaries, regulations, offence codes, and other legal material used across England and Wales. The post advertises approximately 135,000 law enforcement contact records. A p
🚨🇪🇸 Spanish Ministry of Foreign Affairs dataset containing 1.95 million records allegedly listed for sale A forum actor claims to have exploited an IDOR vulnerability in a system tied to Spain’s Ministry of Foreign Affairs, European Union and Cooperation, allowing the enumeration and extraction of 1,953,721 registered user profiles. The listing advertises a 2.45GB JSON archive for $1,500. The a
🚨 Alleged Microsoft Data Breach Claims Surface A threat actor claims to have breached Microsoft and exfiltrated approximately 130GB of corporate data, which is allegedly being published on a TOR-based leak site. The claimed dataset reportedly includes PII, employee and customer contact information, authentication-related data, password hashes, portal identities, corporate account information, int
Threat Actor Claims 130GB Microsoft Corporate Data Breach A threat actor claims to have breached Microsoft and exfiltrated approximately 130 GB of corporate data, allegedly published on a TOR-based leak site. Full technical analysis: https:// thecybersecguru.com/news/alleg ed-microsoft-data-breach-130gb-leak/ The claimed dataset reportedly includes PII, authentication-related information, password
🚨🇰🇷 Access to unnamed South Korean software company allegedly listed for sale A forum actor claims to be selling access to a South Korean company operating in the software and hospitality sectors, with reported annual revenue of approximately $10 million. The listing advertises MariaDB, SSH, and SFTP access across approximately 33 servers. No company name, asking price, sample data, or technica
🚨🇫🇷 French Archery Federation dataset allegedly listed for sale A forum actor claims to be selling an updated database tied to the Fédération Française de Tir à l’Arc, France’s national governing body for archery. The seller says the data was obtained through SQL injection and that an earlier version was sold approximately 18 months ago. The listing advertises around 658,000 address records, 37
🚨🇫🇷 Cartogip contact dataset containing approximately 1,200 records allegedly leaked A forum actor claims to have leaked contact data tied to Cartogip, a French web-based geographic information system developed by GIP ATGeRi for mapping, geospatial data, and field operations. The allegedly exposed information includes names, titles, mobile and landline phone numbers, company or municipal organi
🚨🇪🇬 Egyptian Football Association database and player documents allegedly leaked A forum actor claims to have leaked databases belonging to the Egyptian Football Association, the governing body responsible for football in Egypt. The listing advertises a 9.6GB archive containing approximately 350,000 player records, along with photographs, identity documents, military forms, contracts, graduatio
🚨🇨🇱 Chilean Ministry of Health patient records allegedly leaked A forum actor claims to have leaked approximately 5,000 records tied to Chile’s Ministry of Health and the Mi Paciente platform. Download and sample links were posted on the forum. The allegedly exposed information includes patients’ full names, Chilean RUT identifiers, phone numbers, email addresses, record dates, signatures, and
🚨🇫🇷 City of Paris dataset containing approximately 320,000 records allegedly listed for sale A forum actor claims to be selling data obtained from paris.fr, the official website of the City of Paris. The seller dates the alleged breach to July 27, 2026, and is asking $150 for the dataset. The listing advertises 320,293 records. The allegedly exposed information includes full names, dates of bir
🚨🇹🇷 FortiGate access to an unnamed Turkish organization allegedly listed for sale A forum actor claims to be selling privileged access to a Turkish organization reportedly generating approximately 500 million in revenue. The listing advertises FortiGate SSH and web-panel access with super-administrator privileges across more than 100 hosts. The environment allegedly includes Windows, Linux, and
🚨🇸🇦 Blackbox BBVAS Saudi mobile subscriber data allegedly leaked A forum actor claims to have breached Blackbox LTD, a value-added services provider operating across Beirut, Dubai, and Riyadh that handles mobile subscription billing for services including Mobily and STC. The post advertises 59,903 unique Saudi phone numbers and 88,501 transaction events. The exposed data allegedly includes tran
🚨🇧🇷 NúcleoGov database and server access allegedly compromised A forum actor claims to have breached NúcleoGov, a Brazilian hosting provider reportedly responsible for infrastructure supporting multiple government websites, including domains under .leg.br and .gov.br. The post advertises full access to the company’s servers and a 15GB database dump, which was published across several download l
🚨🇫🇷 Resaclick user database allegedly leaked A forum actor claims to have leaked a database belonging to Resaclick, a French online appointment scheduling platform that allows users to book appointments with professionals and receive automated reminders. The post advertises 10,315 records tied to approximately 10,263 individuals. Published samples contain names, email addresses, phone numbers,
🚨🇺🇸 SSH access to US healthcare or insurance organization allegedly offered for sale A forum actor is advertising SSH access to an unidentified organization in the United States operating within the healthcare or insurance sector. The listing prices the access at $800 but provides no additional details about the affected organization, compromised systems, account privileges, or scope of access.
🚨🇹🇷 FortiGate access to more than 120 Turkish hosts allegedly offered for sale A forum actor is advertising access to an unidentified organization in Turkey, claiming the compromised environment includes more than 120 hosts and approximately $500 million in revenue. The listing advertises FortiGate SSH access with SUPER_ADMIN privileges across Windows, Linux, and virtual machine systems. The ac
🚨🇲🇾 RDP access to Malaysian retail or e-commerce company allegedly offered for sale A forum actor is advertising access to an unidentified retail or e-commerce company in Malaysia, claiming the organization generates between $25 million and $50 million in revenue and operates a network of approximately 2,500 hosts. The listing advertises RDP access with domain user privileges and states that Sy
🚨🇫🇷 Personal information linked to alleged ChatControl supporters leaked A forum actor claims to have published personal information belonging to individuals allegedly involved in supporting or implementing ChatControl, the proposed European Union framework aimed at detecting child sexual abuse material in online communications. A published sample contains a person’s name, date and place of bir
🚨🇫🇷 L’Assurance Maladie healthcare provider registry allegedly leaked A forum actor claims to have leaked a 2026 healthcare provider registry associated with L’Assurance Maladie, France’s national health insurance system. The listing advertises more than 9.8 million records in a 1.98GB file, although the thread title claims approximately 12 million records. The data allegedly includes healthcar
🚨🇪🇬 Egyptian pharmaceutical manufacturer ERP database allegedly offered for sale A forum actor claims to be selling a complete 20GB production ERP database belonging to an unidentified Egyptian pharmaceutical manufacturer. The alleged Microsoft SQL Server export contains 4,138 tables covering manufacturing, customers, suppliers, finance, and human resources. The listing advertises 19,371 pharma
🚨🇪🇬 Alfa Coatings ERP database allegedly offered for sale A forum actor claims to be selling a complete ERP database belonging to Alfa Coatings, an Egyptian manufacturer of coatings and chemical products. The alleged SQL export contains 4,345 tables and approximately 2.5GB of raw data covering accounting, human resources, inventory, production, and customer management systems. The listing adver
🚨🇮🇳 Nukkad Shops customer data allegedly offered for sale A forum actor claims to be selling customer data belonging to Nukkad Shops, an Indian retail technology company. The listing advertises approximately 6.6 million records for $5,000. The exposed data allegedly includes customer names, mobile numbers, email addresses, street addresses, states, cities, and localities. Published samples cont
🚨🇲🇽 National Institute of Anthropology and History systems allegedly compromised A forum actor claims to have compromised systems belonging to Mexico’s National Institute of Anthropology and History, a federal agency responsible for preserving and managing the country’s archaeological, anthropological, historical, and cultural heritage. Published screenshots allegedly show access to an internal
🚨TG Core Telegram automation toolkit source code allegedly offered for sale A forum seller is advertising the source code for TG Core, a Telegram automation framework designed to manage large pools of accounts and proxies while supporting custom tools built on the MTProto protocol. The listing claims the toolkit can import Telegram Desktop session data, verify account status, scrape users from pu
🚨🇨🇷 Costa Rican identity documents and KYC records allegedly leaked A forum actor claims to have published a large collection of documents linked to individuals in Costa Rica, including identity cards, driver’s licenses, selfies, and know-your-customer records. The post advertises access to as many as 20,000 document sets and includes several sample links. This claim is currently unverified. 💥
🚨🇲🇽🇳🇮 UNIVIM and UNCSM student photos allegedly leaked A forum actor claims to have exploited an IDOR vulnerability affecting student portals operated by Mexico’s Universidad Virtual del Estado de Michoacán and Nicaragua’s Universidad Nacional Casimiro Sotelo Montenegro. The post advertises 275 student profile photos. The actor claims valid user identifiers were enumerated and the images were
🚨🇧🇪🇩🇪 European bank accounts and Stripe merchant access allegedly offered for sale A forum actor is advertising access to bank accounts in Belgium and Germany capable of receiving instant SEPA transfers, along with European Stripe and e-commerce merchant accounts for processing card payments. The listing prices the access between $5,000 and $10,000 and proposes a revenue-sharing arrangement i
🚨 Access credentials for billion-dollar company allegedly compromised A forum actor claims to possess API keys and remote MySQL connection details belonging to an unidentified company with more than $1 billion in annual revenue. The actor says database access is currently blocked by an IP whitelist. The post seeks assistance from someone with web intrusion and ransomware expertise to access the d
🚨🇺🇸 23 million US clinic patient records allegedly offered for sale A forum actor claims to be selling approximately 23 million patient records obtained from an unidentified clinic in the United States. The actor says the website data was collected in July 2026 and is being sold privately to a single buyer. The advertised data allegedly includes names, dates of birth, gender, addresses, phone n