💥 Monochrome online store hack: user and admin data for sale!
Recently, information about the hack of Russian online store Monochrome.ru, known for its stylish minimalist products, appeared online. The hacker attack resulted in the leak of a significant amount of data, including personal and administrative information. The database has already been put up for sale on one of the shady forums.
What did the duckie include?
It included:
⚪️ Customers' personal details (names, phone numbers, e-mail).
⚪️ Order details (addresses, amounts, payment methods).
⚪️ Admin information (accounts, contact details).
Why is this important?
Leaking this much data can cause serious damage to both users and the company:
⚪️ Risks to users: possibility of fraud, phishing attacks, account compromise.
⚪️ Risks to the company: loss of customer trust, reputational and financial losses.
The situation emphasizes the importance of enhanced data protection in the digital age. There has been no official statement from Monochrome yet.
@DataBreachToday
Recently, information about the hack of Russian online store Monochrome.ru, known for its stylish minimalist products, appeared online. The hacker attack resulted in the leak of a significant amount of data, including personal and administrative information. The database has already been put up for sale on one of the shady forums.
What did the duckie include?
It included:
Why is this important?
Leaking this much data can cause serious damage to both users and the company:
The situation emphasizes the importance of enhanced data protection in the digital age. There has been no official statement from Monochrome yet.
@DataBreachToday
Please open Telegram to view this post
VIEW IN TELEGRAM
In the lead-up to 2025, a group of Ukrainian hackers claimed a massive cyberattack on Russian internet service providers. According to the hackers, the attack was a "gift" to Russians for the New Year and a demonstration that their activities will not cease.
The hackers claim to have breached 4 providers and stolen the personal data of their customers and employees. Here is a list of the affected companies:
1. Annex.pro (Novorossiysk) - a provider that advertises "unlimited internet." The hackers stated they stole the billing database, cleaned servers, and "fed" their MikroTiks.
2. Obltelekom (Moscow and the Moscow region) - a provider that offers telecommunications services. Hackers reported that they gained access to data from ASR Platex and compromised 18 servers.
3. KROSS-T (Pushkinsky district) - a major communications operator. The hackers claim to have stolen the database and handed it over to "their beloved users." 12 servers could not be protected from the attack.
4. Delfin Telecom (Moscow region) - a subsidiary of KROSS-T. According to the hackers, they also gained access to the data of this company.
The hackers stated that the data obtained from the breach includes the personal data of clients and employees of these companies. They posted links to download the stolen data on their Telegram channel.
According to the hackers, this attack was prepared over two weeks and is a response to Russia's actions. They also emphasized that they would continue to attack Russian companies, the state, logistics, and financial sectors, as well as entertainment organizations.
Assessment:
This attack demonstrates the vulnerability of the Russian telecommunications sector and the potential threats of personal data leaks. It is strongly recommended to exercise caution when downloading and distributing the stolen data.
@DataBreachToday
Please open Telegram to view this post
VIEW IN TELEGRAM
❤1🤡1
Massive Mobile Leak in Italy: 1 Million Numbers Compromised.
A reported data breach has reportedly exposed 1 million #Italian mobile phone numbers, raising alarms about privacy and potential identity theft.
@DataBreachToday
A reported data breach has reportedly exposed 1 million #Italian mobile phone numbers, raising alarms about privacy and potential identity theft.
@DataBreachToday
Massive Data Breach Alert: 43 Million Argentinian Records on Sale!
A HUGE database, potentially the largest ever from #Argentina, is being offered for sale on Telegram. The seller claims the database is completely fresh and first-hand.
Here's what we know:
• Database Size: A staggering 830.34GB total (43.72GB text data, 786.62GB images)
• Record Count: Over 91 million records, which are reportedly made up of 45,764,554 text files and 45,764,554 image files
• Data Type: The database includes extremely sensitive personal information on Argentinian citizens linked by DNI (Argentina's national ID number).
• Content: Each DNI record includes:
• Photo of the ID card
• Text file with comprehensive personal data:
• First and last name
• Gender, age, date of birth
• DNI creation and expiration dates
• Address, ZIP code
• Phone number
• Unique ID numbers: idtramiteprincipal, idciudadano, etc.
This appears to be a significant breach that exposes an unprecedented amount of personal data of Argentinian citizens. The inclusion of ID photos makes it particularly concerning, as it could facilitate identity theft and other serious crimes.
@DataBreachToday
A HUGE database, potentially the largest ever from #Argentina, is being offered for sale on Telegram. The seller claims the database is completely fresh and first-hand.
Here's what we know:
• Database Size: A staggering 830.34GB total (43.72GB text data, 786.62GB images)
• Record Count: Over 91 million records, which are reportedly made up of 45,764,554 text files and 45,764,554 image files
• Data Type: The database includes extremely sensitive personal information on Argentinian citizens linked by DNI (Argentina's national ID number).
• Content: Each DNI record includes:
• Photo of the ID card
• Text file with comprehensive personal data:
• First and last name
• Gender, age, date of birth
• DNI creation and expiration dates
• Address, ZIP code
• Phone number
• Unique ID numbers: idtramiteprincipal, idciudadano, etc.
This appears to be a significant breach that exposes an unprecedented amount of personal data of Argentinian citizens. The inclusion of ID photos makes it particularly concerning, as it could facilitate identity theft and other serious crimes.
@DataBreachToday
😁1
Hackers Claim to Have Stolen Millions of H&M Online Shoppers' Details
Fashion retailer H&M has reportedly exposed millions of customer records in the United Arab Emirates (UAE), with leaked data revealing personal and sensitive information.
The stolen data was posted on a well-known leak forum used by cybercriminals to trade compromised information. Cybernews researchers analyzed a publicly available sample and found the data to be authentic.
According to the attackers, the breach includes over 4 million customer records and 1.4 million address-related entries, totaling 8 GB of stolen data. The compromised information allegedly includes:
▫️ First and last names
▫️ Email addresses
▫️ Home addresses
▫️ Billing details
▫️ Shipping information
The breach raises serious concerns about data security for H&M customers, with potential risks of fraud and identity theft.
@DataBreachToday
Fashion retailer H&M has reportedly exposed millions of customer records in the United Arab Emirates (UAE), with leaked data revealing personal and sensitive information.
The stolen data was posted on a well-known leak forum used by cybercriminals to trade compromised information. Cybernews researchers analyzed a publicly available sample and found the data to be authentic.
According to the attackers, the breach includes over 4 million customer records and 1.4 million address-related entries, totaling 8 GB of stolen data. The compromised information allegedly includes:
▫️ First and last names
▫️ Email addresses
▫️ Home addresses
▫️ Billing details
▫️ Shipping information
The breach raises serious concerns about data security for H&M customers, with potential risks of fraud and identity theft.
@DataBreachToday
FBI Shuts Down Popular Hacking Forums Cracked.io and Nulled.to
The Federal Bureau of Investigation (FBI) has conducted a large-scale operation, resulting in the seizure of domains belonging to two well-known hacking forums — Cracked.io and Nulled.to. These platforms had long been used for distributing cracked software, leaked data, and other illegal materials.
Cracked.io and Nulled.to were popular among cybercriminals, offering access to pirated software, databases, and hacking tools. These forums also actively discussed methods for bypassing security measures and shared experiences in cyberfraud.
The seizure of the domains is part of a global effort to combat cybercrime. Now, when attempting to visit Cracked.io and Nulled.to, users are met with a message stating that the sites have been confiscated by U.S. law enforcement.
Experts note that such actions by the FBI deal a significant blow to underground hacker communities, though it is unlikely to completely halt their activities. It is probable that similar forums will soon reappear on new domains or in the dark web.
Nevertheless, the FBI's operation is an important step in the fight against cybercrime, demonstrating the authorities' determination to protect digital security.
@DataBreachToday
The Federal Bureau of Investigation (FBI) has conducted a large-scale operation, resulting in the seizure of domains belonging to two well-known hacking forums — Cracked.io and Nulled.to. These platforms had long been used for distributing cracked software, leaked data, and other illegal materials.
Cracked.io and Nulled.to were popular among cybercriminals, offering access to pirated software, databases, and hacking tools. These forums also actively discussed methods for bypassing security measures and shared experiences in cyberfraud.
The seizure of the domains is part of a global effort to combat cybercrime. Now, when attempting to visit Cracked.io and Nulled.to, users are met with a message stating that the sites have been confiscated by U.S. law enforcement.
Experts note that such actions by the FBI deal a significant blow to underground hacker communities, though it is unlikely to completely halt their activities. It is probable that similar forums will soon reappear on new domains or in the dark web.
Nevertheless, the FBI's operation is an important step in the fight against cybercrime, demonstrating the authorities' determination to protect digital security.
@DataBreachToday
😢2
Hackers Claim to Have Breached N3 Entry: Internal Data Allegedly Leaked
A hacker group has announced a successful breach of N3 Entry (tv.n3.ru), a service operated by LLC "Media Systems", which provides internet, television, and telephony services in #Russia.
To confirm the breach, the hackers released screenshots of the internal infrastructure and claimed to have obtained access to a massive amount of confidential data:
🔹 5.3 TB of documents
🔹 1.2 TB of Oracle database files
🔹 600 GB of corporate emails
Additionally, the attackers stated that they performed a "negative optimization" of key systems, affecting:
🔻 Virtual server hosts (vz35, vz37, vz39, vz40, sm1)
🔻 Network control center (noc.n3.ru, zabbix.n3.ru)
🔻 Document storage (spanning from 2011 to 2025)
🔻 Email servers (emx.corp.n3.ru, pmg.n3.ru)
🔻 EMR streaming servers (SumaVision)
@DataBreachToday
A hacker group has announced a successful breach of N3 Entry (tv.n3.ru), a service operated by LLC "Media Systems", which provides internet, television, and telephony services in #Russia.
To confirm the breach, the hackers released screenshots of the internal infrastructure and claimed to have obtained access to a massive amount of confidential data:
🔹 5.3 TB of documents
🔹 1.2 TB of Oracle database files
🔹 600 GB of corporate emails
Additionally, the attackers stated that they performed a "negative optimization" of key systems, affecting:
🔻 Virtual server hosts (vz35, vz37, vz39, vz40, sm1)
🔻 Network control center (noc.n3.ru, zabbix.n3.ru)
🔻 Document storage (spanning from 2011 to 2025)
🔻 Email servers (emx.corp.n3.ru, pmg.n3.ru)
🔻 EMR streaming servers (SumaVision)
@DataBreachToday
🚨 The LastPass hack resulted in the theft of over $100 million worth of cryptocurrency! 💥
A recent investigation has revealed that the scale of the LastPass hack in 2022 was much larger than previously thought. Ripple co-founder Chris Larsen, whose personal XRP cryptocurrency accounts were emptied of over $100 million, was affected. 💸
🔍 What happened:
- Hackers gained access to LastPass data and used it to steal private keys.
- Larsen's funds were laundered through major crypto exchanges, including Binance.
- Despite the damage, investigators were able to freeze $24 million worth of crypto assets.
🔑 How it happened:
According to investigator ZachXBT, the leak was due to the storage of private keys in the LastPass password manager. While Larsen's name was not officially mentioned in the lawsuit, investigators confirmed the theft was linked to the LastPass data leak.
💼 The aftermath of the LastPass hack:
- In December, experts at The Security Alliance estimated the losses associated with the incident at more than $250 million, and the amount continues to grow.
- LastPass acknowledged that the attackers gained access to the company's cloud storage where backups of customer data were stored in 2022.
⚠️ How to protect your assets:
1. Never store private keys in password managers.
2. Use hardware wallets to protect your funds.
3. Set up multi-factor authentication (2FA).
4. Change passwords regularly and update your account security.
@DataBreachToday
A recent investigation has revealed that the scale of the LastPass hack in 2022 was much larger than previously thought. Ripple co-founder Chris Larsen, whose personal XRP cryptocurrency accounts were emptied of over $100 million, was affected. 💸
🔍 What happened:
- Hackers gained access to LastPass data and used it to steal private keys.
- Larsen's funds were laundered through major crypto exchanges, including Binance.
- Despite the damage, investigators were able to freeze $24 million worth of crypto assets.
🔑 How it happened:
According to investigator ZachXBT, the leak was due to the storage of private keys in the LastPass password manager. While Larsen's name was not officially mentioned in the lawsuit, investigators confirmed the theft was linked to the LastPass data leak.
💼 The aftermath of the LastPass hack:
- In December, experts at The Security Alliance estimated the losses associated with the incident at more than $250 million, and the amount continues to grow.
- LastPass acknowledged that the attackers gained access to the company's cloud storage where backups of customer data were stored in 2022.
⚠️ How to protect your assets:
1. Never store private keys in password managers.
2. Use hardware wallets to protect your funds.
3. Set up multi-factor authentication (2FA).
4. Change passwords regularly and update your account security.
@DataBreachToday
😁1😍1🍾1
🚨 Jaguar Land Rover Data Leak: Source Code and Employee Details Exposed! 🚨
Jaguar Land Rover (JLR), the iconic British luxury car manufacturer, has reportedly fallen victim to a major data breach. Attackers claim to have stolen and leaked source code, tracking data, and employee details.
🔍 What Happened:
🔹 Attackers claim to have accessed 700 internal company documents, including:
🔹 Source code and development logs
🔹 Tracking data (potentially revealing movement patterns)
🔹 Employee details (usernames, email addresses, display names, and time zones)
🔹 The breach was announced on a popular data leak forum by a well-known hacker in the underground community.
🚧 Why It Matters:
Security Risks: Leaked tracking data could expose movement patterns of high-value targets.
Corporate Secrets: Source code leakage could compromise proprietary technologies and intellectual property.
Personal Safety: Leaked employee details may lead to targeted phishing attacks, especially against admins and high-privilege users.
📝 Company Response:
Jaguar Land Rover has not yet confirmed the breach. Cybersecurity experts are investigating the incident, and further updates are expected soon.
@DataBreachToday
Jaguar Land Rover (JLR), the iconic British luxury car manufacturer, has reportedly fallen victim to a major data breach. Attackers claim to have stolen and leaked source code, tracking data, and employee details.
🔍 What Happened:
🔹 Attackers claim to have accessed 700 internal company documents, including:
🔹 Source code and development logs
🔹 Tracking data (potentially revealing movement patterns)
🔹 Employee details (usernames, email addresses, display names, and time zones)
🔹 The breach was announced on a popular data leak forum by a well-known hacker in the underground community.
🚧 Why It Matters:
Security Risks: Leaked tracking data could expose movement patterns of high-value targets.
Corporate Secrets: Source code leakage could compromise proprietary technologies and intellectual property.
Personal Safety: Leaked employee details may lead to targeted phishing attacks, especially against admins and high-privilege users.
📝 Company Response:
Jaguar Land Rover has not yet confirmed the breach. Cybersecurity experts are investigating the incident, and further updates are expected soon.
@DataBreachToday
🚨 Major Data Breach Exposes 500,000 US Teachers to Hackers!
🔓 A massive cyberattack has compromised the personal and financial data of over 500,000 members of Pennsylvania’s largest teacher’s union (PSEA).
📅 The breach occurred on July 6th, 2024, but its full impact was only revealed in February 2025.
💾 Stolen data includes:
🔹 Full name and date of birth
🔹 Driver’s license or state ID number
🔹 Social Security number
🔹 Bank account number and PIN
🔹 Payment card number and expiration date
🔹 Passport number
🔹 Taxpayer ID
🔹 Username and password
🔹 Health insurance and medical information
⚠️ Such sensitive data can be exploited for identity theft, credit card fraud, and creating fake businesses.
❗️ Despite the severity of the breach, PSEA claims that there is no evidence the stolen data has been used maliciously. Affected individuals are being offered 12 months of free credit monitoring and identity theft protection.
🔐 PSEA assures that they continue to strengthen their cybersecurity measures to protect members' data.
@DataBreachToday
#Education #US #Teachers
🔓 A massive cyberattack has compromised the personal and financial data of over 500,000 members of Pennsylvania’s largest teacher’s union (PSEA).
📅 The breach occurred on July 6th, 2024, but its full impact was only revealed in February 2025.
💾 Stolen data includes:
🔹 Full name and date of birth
🔹 Driver’s license or state ID number
🔹 Social Security number
🔹 Bank account number and PIN
🔹 Payment card number and expiration date
🔹 Passport number
🔹 Taxpayer ID
🔹 Username and password
🔹 Health insurance and medical information
⚠️ Such sensitive data can be exploited for identity theft, credit card fraud, and creating fake businesses.
❗️ Despite the severity of the breach, PSEA claims that there is no evidence the stolen data has been used maliciously. Affected individuals are being offered 12 months of free credit monitoring and identity theft protection.
🔐 PSEA assures that they continue to strengthen their cybersecurity measures to protect members' data.
@DataBreachToday
#Education #US #Teachers
🚨 Samsung Hit by Major Data Leak: 270,000 Customer Tickets Exposed Online 🚨
Samsung is facing a serious breach after hacker “GHNA” dumped data from over 270,000 customer support tickets online. This leak, tied to Samsung Germany, could have been prevented, according to cybercrime experts.
Here’s the scoop:
🔍 How it Happened:
The data was taken from samsung-shop.spectos.com, and it appears to be linked to stolen credentials from a 2021 infostealer malware attack. These credentials have been sitting in a database for years, untouched, despite being flagged by security firms.
💥 What Was Leaked:
- Customer Information: Full names, email addresses, home addresses
- Transactional Data: Order numbers, ticket IDs, agent emails
- This isn’t just basic data; it’s a detailed map of #Samsung #Germany’s customers, including past purchases and personal info.
@DataBreachToday
Samsung is facing a serious breach after hacker “GHNA” dumped data from over 270,000 customer support tickets online. This leak, tied to Samsung Germany, could have been prevented, according to cybercrime experts.
Here’s the scoop:
🔍 How it Happened:
The data was taken from samsung-shop.spectos.com, and it appears to be linked to stolen credentials from a 2021 infostealer malware attack. These credentials have been sitting in a database for years, untouched, despite being flagged by security firms.
💥 What Was Leaked:
- Customer Information: Full names, email addresses, home addresses
- Transactional Data: Order numbers, ticket IDs, agent emails
- This isn’t just basic data; it’s a detailed map of #Samsung #Germany’s customers, including past purchases and personal info.
@DataBreachToday
🚨 Massive Data Leak Exposes 1.1M Job Seekers' Personal Information
#beWanted, a leading European employment platform, has exposed over 1.1 million job seekers' CVs and resumes, containing sensitive details like names, phone numbers, emails, national IDs, and more. The data was found in an unsecured Google Cloud Storage bucket and remains publicly accessible months after discovery.
🔍 What Was Leaked?
🔹 Full names
🔹 Phone numbers
🔹 Email addresses
🔹 Home addresses
🔹 Dates of birth
🔹 National ID numbers
🔹 Nationalities
🔹 Places of birth
🔹 Social media links
🔹 Employment history
🔹 Educational background
This exposure significantly increases the risk of identity theft, enabling cybercriminals to create synthetic identities or fraudulent accounts. Despite multiple attempts to contact beWanted, the data remains publicly accessible.
@DataBreachToday
#beWanted, a leading European employment platform, has exposed over 1.1 million job seekers' CVs and resumes, containing sensitive details like names, phone numbers, emails, national IDs, and more. The data was found in an unsecured Google Cloud Storage bucket and remains publicly accessible months after discovery.
🔍 What Was Leaked?
🔹 Full names
🔹 Phone numbers
🔹 Email addresses
🔹 Home addresses
🔹 Dates of birth
🔹 National ID numbers
🔹 Nationalities
🔹 Places of birth
🔹 Social media links
🔹 Employment history
🔹 Educational background
This exposure significantly increases the risk of identity theft, enabling cybercriminals to create synthetic identities or fraudulent accounts. Despite multiple attempts to contact beWanted, the data remains publicly accessible.
@DataBreachToday
🚨 Major Data Breach Hits #US Federal Bureau of Prisons (BOP)
Hackers claim to have stolen over 320GB of highly sensitive data from the Federal Bureau of Prisons — including inmate and staff information.
🔓 Alleged leaked data includes:
▫️ Full names & SSNs
▫️ Medical records
▫️ Incident reports
▫️ Release plans
▫️ Staff details
▫️ …and more.
📅 The hackers say the data was stolen as recently as June 20 and posted proof on a major data leak forum.
👥 BOP, which oversees 120 federal prisons and employs 35,000 staff, confirmed to Cybernews that it’s investigating the breach.
⚠️ If verified, this could pose serious threats, including identity theft, retaliation against staff, and endangerment of inmates.
🗓 Updated June 27 – 03:05 GMT with BOP’s official statement:
“We’re aware of the claims and are investigating their legitimacy.”
Stay tuned for more updates. 🔐
@DataBreachToday
Hackers claim to have stolen over 320GB of highly sensitive data from the Federal Bureau of Prisons — including inmate and staff information.
🔓 Alleged leaked data includes:
▫️ Full names & SSNs
▫️ Medical records
▫️ Incident reports
▫️ Release plans
▫️ Staff details
▫️ …and more.
📅 The hackers say the data was stolen as recently as June 20 and posted proof on a major data leak forum.
👥 BOP, which oversees 120 federal prisons and employs 35,000 staff, confirmed to Cybernews that it’s investigating the breach.
⚠️ If verified, this could pose serious threats, including identity theft, retaliation against staff, and endangerment of inmates.
🗓 Updated June 27 – 03:05 GMT with BOP’s official statement:
“We’re aware of the claims and are investigating their legitimacy.”
Stay tuned for more updates. 🔐
@DataBreachToday
😁1
🚨 Hacker data leak: Details of 5 million online #casino players are for sale
🔓 A major data leak related to the world's online casinos has been disclosed on the security forum XSS.is. The hacker who posted the ad reported the sale of sensitive information, which includes both public and private data about casino users.
💥 According to the publication, for 0.4 XMR (approximately 80 USD at current exchange rates), the attacker is offering a full set of information, including data on more than 5 million players. This list includes both novice users, regular players and VIP clients. Among the leaked data are personal details, game statistics, as well as information that can be used for further hacking and manipulation in online games.
❗️ The seller claims to be selling information regarding not only major international online casinos such as FonBet, JetCasino, PlayTech, VulkanRoyal, MostBet and others, but also lesser-known platforms operating in different countries.
@DataBreachToday
🔓 A major data leak related to the world's online casinos has been disclosed on the security forum XSS.is. The hacker who posted the ad reported the sale of sensitive information, which includes both public and private data about casino users.
💥 According to the publication, for 0.4 XMR (approximately 80 USD at current exchange rates), the attacker is offering a full set of information, including data on more than 5 million players. This list includes both novice users, regular players and VIP clients. Among the leaked data are personal details, game statistics, as well as information that can be used for further hacking and manipulation in online games.
❗️ The seller claims to be selling information regarding not only major international online casinos such as FonBet, JetCasino, PlayTech, VulkanRoyal, MostBet and others, but also lesser-known platforms operating in different countries.
@DataBreachToday
🔒 Hackers Selling KYC Data from Major Websites
A user going by the name BlackElite has posted an ad on a darknet forum offering stolen Know Your Customer (KYC) data from some of the world’s largest websites. According to the listing, for 1 Monero (XMR) — roughly $300 — buyers can get access to photos of documents and selfies used for identity verification.
A screenshot from the post shows numerous files labeled “KYC” containing passport images, ID cards, and photos of people holding documents. The documents appear to include passports from several countries, including #Indonesia and the #United States.
This points to a large-scale data breach that could significantly increase the risk of identity theft and fraud. The sale of such data is particularly dangerous, as it is often used by financial and crypto platforms to verify user identities.
Cybersecurity experts warn that KYC leaks are among the most serious threats, with potential consequences including unauthorized bank transactions, fraudulent loan applications, and legal identity forgery.
An investigation is reportedly underway, but the exact platforms affected by the breach have not yet been identified.
@DataBreachToday
A user going by the name BlackElite has posted an ad on a darknet forum offering stolen Know Your Customer (KYC) data from some of the world’s largest websites. According to the listing, for 1 Monero (XMR) — roughly $300 — buyers can get access to photos of documents and selfies used for identity verification.
A screenshot from the post shows numerous files labeled “KYC” containing passport images, ID cards, and photos of people holding documents. The documents appear to include passports from several countries, including #Indonesia and the #United States.
This points to a large-scale data breach that could significantly increase the risk of identity theft and fraud. The sale of such data is particularly dangerous, as it is often used by financial and crypto platforms to verify user identities.
Cybersecurity experts warn that KYC leaks are among the most serious threats, with potential consequences including unauthorized bank transactions, fraudulent loan applications, and legal identity forgery.
An investigation is reportedly underway, but the exact platforms affected by the breach have not yet been identified.
@DataBreachToday
🥰1😁1😍1
🚨 Hackers Leak Resideo Data on Underground Forum
A new auction has appeared on a dark web forum offering an exclusive dataset allegedly stolen from Resideo Technologies, a major #US. manufacturer of smart home and security products.
According to the post, the dump includes:
▫️Confidential documents from Resideo and its partners
▫️Blueprints, surveillance schematics, A/V system layouts
▫️Internal testing reports and invoices
▫️Proprietary information from acquired company Snap One
📌 *Resideo acquired Snap One for \$1.4B in 2024.* Snap One (formerly SnapAV) specializes in smart living and automation tech for residential and commercial sectors.
🧨 The sellers claim Resideo refused to pay a “small deletion fee,” hiding behind “nonexistent legal terms,” prompting them to release the dataset for sale.
💰 Auction details:
▫️Start: 0.4 BTC
▫️Step: 0.2 BTC
▫️Blitz price: 1 BTC
▫️Ends: 48 hours after the first bid
▫️📩 Sample available only with POF (Proof of Funds)
📎 Attached images show preview files labeled “REZI\_BIG” and “SNPO\_BIG.”
@DataBreachToday
A new auction has appeared on a dark web forum offering an exclusive dataset allegedly stolen from Resideo Technologies, a major #US. manufacturer of smart home and security products.
According to the post, the dump includes:
▫️Confidential documents from Resideo and its partners
▫️Blueprints, surveillance schematics, A/V system layouts
▫️Internal testing reports and invoices
▫️Proprietary information from acquired company Snap One
📌 *Resideo acquired Snap One for \$1.4B in 2024.* Snap One (formerly SnapAV) specializes in smart living and automation tech for residential and commercial sectors.
🧨 The sellers claim Resideo refused to pay a “small deletion fee,” hiding behind “nonexistent legal terms,” prompting them to release the dataset for sale.
💰 Auction details:
▫️Start: 0.4 BTC
▫️Step: 0.2 BTC
▫️Blitz price: 1 BTC
▫️Ends: 48 hours after the first bid
▫️📩 Sample available only with POF (Proof of Funds)
📎 Attached images show preview files labeled “REZI\_BIG” and “SNPO\_BIG.”
@DataBreachToday
🚨 45 Million French Citizens’ Records Leaked After Suspected Attack Exposes Massive Data Trove
Researchers discovered that an unprotected database was exposed online, containing over 45 million records of French citizens. The data appears to have been collected by cybercriminals or data traders for subsequent resale.
📌 What was exposed:
• Around 23 million records resembling population registry data (name, address, date of birth)
• Around 9.2 million healthcare worker records (RPPS/ADELI format)
• Around 6 million CRM contacts
• Around 6 million financial profiles (IBAN, BIC)
• Vehicle registration and insurance data linked to individuals
👉 All of this was accessible in an open cloud storage in France with no password or security.
The combination of demographic, medical, and financial data makes this particularly dangerous.
🛠 After the hosting company was notified, access to the database was restricted. However, it’s still unclear how long the data was exposed online and who may have downloaded it. (cybernews.com)
Let me know if you need any adjustments!
@DataBreachToday
Researchers discovered that an unprotected database was exposed online, containing over 45 million records of French citizens. The data appears to have been collected by cybercriminals or data traders for subsequent resale.
📌 What was exposed:
• Around 23 million records resembling population registry data (name, address, date of birth)
• Around 9.2 million healthcare worker records (RPPS/ADELI format)
• Around 6 million CRM contacts
• Around 6 million financial profiles (IBAN, BIC)
• Vehicle registration and insurance data linked to individuals
👉 All of this was accessible in an open cloud storage in France with no password or security.
The combination of demographic, medical, and financial data makes this particularly dangerous.
🛠 After the hosting company was notified, access to the database was restricted. However, it’s still unclear how long the data was exposed online and who may have downloaded it. (cybernews.com)
Let me know if you need any adjustments!
@DataBreachToday
❤1
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed they stole personal information of approximately 6.8 million users.
ℹ️ The stolen data reportedly includes:
⭕️ Crunchyroll username;
⭕️ login name;
⭕️ email address;
⭕️ IP address;
⭕️ general geographic location;
⭕️ support ticket contents.
📆 The leaked data is believed to date back to mid-2025.
👉 @DataBreachToday
ℹ️ The stolen data reportedly includes:
⭕️ Crunchyroll username;
⭕️ login name;
⭕️ email address;
⭕️ IP address;
⭕️ general geographic location;
⭕️ support ticket contents.
📆 The leaked data is believed to date back to mid-2025.
👉 @DataBreachToday
All-Seeing Eye — a bot that knows everything about you!
Situation: you need to dig up as much information as possible based on a full name, phone number, email, car license plate, Telegram account, or even ULP data — basically, any type of data will do. You just enter it into the bot, and it gives you the rest. Nothing illegal — all the data is already publicly available. The bot simply collects it in a convenient way.
@FreeLeakCheckBot – the coolest and most powerful lookup bot, feel free to use it 😉 The downside: it’s paid. In the free version, the bot provides rather limited data. But it works exactly as it should.
Situation: you need to dig up as much information as possible based on a full name, phone number, email, car license plate, Telegram account, or even ULP data — basically, any type of data will do. You just enter it into the bot, and it gives you the rest. Nothing illegal — all the data is already publicly available. The bot simply collects it in a convenient way.
@FreeLeakCheckBot – the coolest and most powerful lookup bot, feel free to use it 😉 The downside: it’s paid. In the free version, the bot provides rather limited data. But it works exactly as it should.
❤1