Ramp4u Cybercrime Forum Allegedly Breached, 340,000 IP Logs and Private Messages Published
A forum user posting as kitta has published what they describe as the database of Ramp4u, a Russian-language cybercrime and dark web forum.
Dark Web Informer - Cyber Threat Intelligence
Please support the site operations by clicking ads.
Vendor Advertises Fraudulently Verified Crypto Exchange Accounts With European Bank Rails
A seller posting as RasselKyc is advertising made-to-order cryptocurrency exchange accounts registered under names supplied by the buyer.
Waggle Database Allegedly Leaked, 106,800+ Pet Camera Customers Exposed Across Three Tables
A forum user posting as 2019 has published what they describe as the customer database of Waggle, a US pet technology company whose products include a smart camera offering live video, two-way audio, treat dispensing, and real-time alerts.
Silvi AI User Data Allegedly Exposed via API Flaw, 16,483 Researcher Records Published
A forum user posting as NightBroker has published what they describe as the user database of Silvi AI, a Danish service that automates academic literature reviews.
Buyer Solicits Corporate Network Access to $350M+ Western Firms, Excluding CIS, Schools and Hospitals
A buyer posting as umbreon is advertising to purchase corporate network access on flat-rate terms, setting out unusually specific selection criteria.
Bacoor City Government Allegedly Breached, 57,000+ Business Permit Records Leaked With One-Week Ultimatum
An actor posting as dopePanda claims to have compromised the business permit database of the Bacoor City Government in Cavite, Philippines, releasing what they describe as more than 57,000 records covering permits, owner names, addresses, and phone numbers.
Baltas Online Allegedly Breached, 750+ Turkish Companies Exposed Through HR Assessment Vendor
An actor posting as WInQ7wk9sA3a claims to have held root access for 47 days to Baltas Online, a Turkish HR and assessment firm, and exfiltrated a 500GB+ archive covering more than 750 corporate clients.
Hungarian State Treasury Allegedly Compromised, Actor Claims vCenter and Identity Vault Access
A threat actor posting as bytetobreach claims to have compromised the Magyar Államkincstár, Hungary's State Treasury, which administers state payments, pensions, family benefits, and EU funding.
Broker Advertises Super Admin Access to Golden Tulip Bahrain FortiGate Firewall
A seller posting as Roiese is offering what they describe as full administrative access to the FortiGate firewall and network security environment of Golden Tulip Bahrain, a hotel property in Bahrain.
ExpoEmpleo Database Allegedly Leaked, 192,280 Uruguayan Job Seekers With National ID Numbers Exposed
A forum user posting as Sub21 has published what they describe as the database of ExpoEmpleo, a Uruguayan employment platform, covering registrations since around 2015.
Mercor Breached, Biometric Face and Voice Data on Every Registered User Offered for Sale
A seller posting as Resolute, claiming to have acted alongside a group using the Lapsus$ name, is advertising data from a complete compromise of Mercor, the US platform that recruits domain experts to produce training data for AI laboratories.
IPRO Customer Database Allegedly Leaked, 60,454 Records From Legal eDiscovery Platform Published
A forum user posting as cozypandas has published what they describe as the full customer database of IPRO, an eDiscovery platform used by law firms, corporations, and government agencies to manage data for litigation.
Broadcom Patches Critical VMware Flaws Enabling vCenter Authentication Bypass and ESXi VM Escape
Broadcom has released emergency security updates for five vulnerabilities affecting VMware vCenter, ESX and ESXi, Workstation, Fusion, Cloud Foundation, vSphere Foundation, and several VMware Telco products.
Lire Demain Database Allegedly Leaked, 5,974 School and Local Authority Client Records Published
A forum user posting as 0xSec has published what they describe as the database of Lire Demain, the schools and institutions network of the French children's publisher Auzou, which supplies books, kamishibai theatres, and educational materials to schools, early years settings, and local authorities.
Planity Database Allegedly for Sale, 999,451 Customers of French Salons and Spas Listed
A seller posting as weykofa is advertising what they describe as the database of Planity, the French online booking platform used by hair salons, beauty businesses, and spas to manage appointments and customer records.
Shopee Customer Database Allegedly for Sale, 300 Million Records Claimed Across Asia and Latin America
A seller posting as 666op is advertising what they describe as a customer database from Shopee, the e-commerce marketplace operated by Sea Limited.
Allo.Solar Database Allegedly Leaked, 101,349 French Customers and 208,000 Solar Equipment Orders Exposed
A forum user posting as ChimeraZ has published what they describe as the database of Allo.Solar, a French e-commerce platform selling photovoltaic and renewable energy equipment.
BENY New Energy Allegedly Breached, User Data Plus Access to EV Charging and Firmware Platforms Shown
A forum user posting as 888 has published what they describe as a breach of Beny.com, operated by BENY New Energy, a manufacturer of solar photovoltaic safety equipment, microinverters, battery storage systems, and EV charging hardware.
Podomoro University Allegedly Breached, 75 Databases and Full Website Source Code Offered for $7,000
A seller posting as LordVoldemort is advertising what they describe as a complete compromise of Podomoro University in Indonesia, an institution established in 2014 under the Agung Podomoro Education Foundation.
SMSA Express Allegedly Breached, 124.7 Million Shipment Records With Sender and Recipient Details for Sale
A seller posting as Demetrius is advertising what they describe as a corporate dataset from SMSA Express, one of Saudi Arabia's largest courier and logistics operators.
A real-time cyber threat intelligence platform that monitors the dark web and clearnet for data breaches, ransomware campaigns, darknet market activity, leaked databases, and active threat actors.