Dark Web Informer - Cyber Threat Intelligence

A forum actor posting as DaOnlySpark has published what they describe as a small dump of data belonging to AdvaCare, a Swiss healthcare consultancy focused on long-term care and nursing.

A forum actor posting as 2019 is selling what they describe as the patient database of Blossom Health, a virtual psychiatric care platform in the United States that provides online therapy and medication management for conditions including anxiety, depression, ADHD, autism, bipolar disorder and OCD.

A forum actor posting as Marx is advertising access to what they describe as a live database of messaging records belonging to Transfast, a cross border payment network acquired by Mastercard in 2019 and now operating as part of its transaction services business.

A forum actor posting as Kazu claims to hold 1.45 TB taken from MSM Unify, a Canadian education technology platform that helps students apply to universities abroad.

A forum actor posting as DaOnlySpark has published 3.7 GB attributed to Jinko, a French cancer care support platform.

A forum actor posting as Keishell, crediting two others, claims to have gained access to the administrative panel of ryxcars.com, a luxury vehicle marketplace based in Dubai.

A forum actor posting as fuie has published data attributed to INPI, the French institute that administers industrial property and the national business register.

A forum actor posting as HollowCrimeCorp is selling what they describe as verified and active access to a high value BNP Paribas account, offered as a username and password pair rather than as data.

A forum actor posting as Alduin has published data attributed to amf.asso.fr, the site of the Association des Maires de France, which represents mayors and heads of intermunicipal bodies.

A forum actor posting as caustic claims to hold 675 GB taken from the network of Réso, a French supplier of construction products including ceilings, partitions, floors and facades, with agencies across the country.

A forum actor posting as GoreTerminal has published what they describe as the database of hopcharge.com, an on demand doorstep electric vehicle charging service operating in India through mobile vans.

A forum actor posting as SaltMobile1 is selling what they describe as a database of Salt, a Swiss mobile operator, containing more than 1,090,000 records.

A forum actor posting as Intelligence is selling what they describe as 3,134,269 full personal data records belonging to customers of DZI Insurance, Bulgaria's oldest insurer and a subsidiary of Belgium's KBC Group.

A forum actor posting as ksye is selling what they describe as the customer database of zerogaspi.fr, a French retailer selling surplus and short dated groceries.

Take-Two Interactive appears to be narrowing its investigation into the people responsible for leaking unreleased Grand Theft Auto VI gameplay, with new court filings showing the publisher is seeking increasingly targeted information from Discord.

A forum actor posting as weykofa has published 16.2 MB across 450 files attributed to science.co.il, the Israel Science and Technology Directory

A forum actor posting as mondial, crediting one collaborator, has published two datasets attributed to developpement-durable.gouv.fr, the domain of France's Ministry for Ecological Transition.

Three forum actors, led by one posting as yiranet, claim to have compromised the infrastructure of the Fédération Nationale Indépendante des Mutuelles, the French federation representing small and medium sized mutual insurers.

A forum actor posting as Keishell, crediting two others, has published what they describe as the myTnT shipment database belonging to pattons.com.au, an Australian business.

A forum actor posting as Kazu is selling what they describe as a 2026 dump from MyVete, a veterinary practice management platform used by animal clinics for patient records, appointments, billing and inventory.