Cyber Breaches

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell a database containing phone numbers and names of approximately two billion Iranian citizens. According to the post, the data was allegedly exfiltrated using Android malware, suggesting a targeted mobile campaign. The scale of the breach, if ...

Dark Web News AnalysisA threat actor on a monitored hacker forum is claiming to have leaked a trove of documents allegedly originating from North Korea. The total size of the leak is reported to be 8.90 GB, with download options available via direct link, magnet, and torrent. The source of ...

Dark Web News AnalysisA cybercrime forum post claims to offer unauthorized access to a private NAS (Network-Attached Storage) server belonging to a Chinese infrastructure and finance company. The listing alleges that the server holds 4.7TB of data and that the seller is using Discord to communicate and potentially distribute the ...

Dark Web News AnalysisA hacker forum post claims to offer a CSV archive containing 1,853,292 rows of personal data allegedly belonging to Vietnamese citizens. The dataset, reportedly sized at 87MB and labeled as covering the years 2024–2025, includes names, phone numbers, and email addresses. The seller is soliciting serious buyers ...

Dark Web News AnalysisA cybercrime forum post claims to offer marketing campaign data allegedly sourced from a U.S.-based hospital. The dataset reportedly includes personally identifiable information (PII) such as full names, phone numbers, email addresses, dates of birth, accident details, and lead status. While the seller asserts that no sensitive ...

Dark Web News AnalysisA post on a known hacker forum claims to offer zip archives labeled “2024_Backup” and “2025_Backup,” allegedly containing source code and website asset files from the Nigerian Bureau of Public Enterprises (BPE). The archives reportedly include a large volume of folders and files, raising concerns about the ...

Dark Web News AnalysisA known cybercrime forum has surfaced a post offering unauthorized SSH access to the Linux infrastructure of a Brazilian telecommunications provider. The actor claims to possess root-level access, along with credentials for MySQL and MongoDB databases containing tens of thousands of client records—46,000 and 69,000 lines respectively. ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked data that they allege was stolen from an API belonging to Humas Polri, the Public Relations division of the Indonesian National Police. According to the seller’s post, the compromised data includes the sensitive ...

Dark Web News Analysis A threat actor on a known cybercrime forum is auctioning what they claim is “Full Admin” access to the WordPress website of a French e-commerce company. According to the seller’s post, the access includes code modification capabilities. To demonstrate the site’s value to potential buyers, the ...