‼️ New Dark Web Informer Blog Post!
Title: Alleged Breach of Colombia's Huila Department Government Extranet Exposes Officer Data, Municipal Offices, and Government Operations Across 8 Municipalities
Link: https://darkwebinformer.com/alleged-breach-of-colombias-huila-department-government-extranet-exposes-officer-data-municipal-offices-and-government-operations-across-8-municipalities/
Title: Alleged Breach of Colombia's Huila Department Government Extranet Exposes Officer Data, Municipal Offices, and Government Operations Across 8 Municipalities
Link: https://darkwebinformer.com/alleged-breach-of-colombias-huila-department-government-extranet-exposes-officer-data-municipal-offices-and-government-operations-across-8-municipalities/
Dark Web Informer
Alleged Breach of Colombia's Huila Department Government Extranet Exposes Officer Data, Municipal Offices, and Government Operations…
‼️🇺🇸 A SQL database dump from 321transit.com containing 30,000 user records with usernames, emails, names and password hashes, plus 14,600 transit pass records with credit card information, phone numbers and addresses.
The data was allegedly found on an unsecured open directory and is being distributed for free download.
The data was allegedly found on an unsecured open directory and is being distributed for free download.
1/2‼️ The database of MyLovely[.]AI, an NSFW AI image generation platform, has allegedly been leaked on a popular cybercrime forum.
Threat Actor: XTC
Category: Data Breach
Industry: AI / Adult Content
Breach contains:
▪️ User IDs
▪️ Email addresses
▪️ Generated on-site content (prompts, images, metadata)
▪️ Content moderation reports
Total rows: 254,580
Unique users: ~106,362
The leaked data includes multiple JSON files, including Profiles, Gallery_Items, Community_Items, and Collections.
The data exposes user email addresses used as display names, subscription plans, Discord links, AI image prompts (including explicit content), Supabase storage URLs, and collection metadata.
Negative prompt fields reveal the platform's content filtering terms designed to block CSAM-adjacent outputs.
Threat Actor: XTC
Category: Data Breach
Industry: AI / Adult Content
Breach contains:
▪️ User IDs
▪️ Email addresses
▪️ Generated on-site content (prompts, images, metadata)
▪️ Content moderation reports
Total rows: 254,580
Unique users: ~106,362
The leaked data includes multiple JSON files, including Profiles, Gallery_Items, Community_Items, and Collections.
The data exposes user email addresses used as display names, subscription plans, Discord links, AI image prompts (including explicit content), Supabase storage URLs, and collection metadata.
Negative prompt fields reveal the platform's content filtering terms designed to block CSAM-adjacent outputs.
❤1😁1
T1erOne forum is now allowing researcher applications. 👇
tier1.life // https://x.com/tieroneforum/status/2041231850337903089
tier1.life // https://x.com/tieroneforum/status/2041231850337903089
❤1
‼️🇺🇸 PLAY Ransomware Claims 2 Victims
Crystal Point, a security software company based in the United States
Morphosis, a US-based architecture, engineering, and design firm. It's the renowned architecture practice founded by Thom Mayne, known for landmark buildings worldwide.
Crystal Point, a security software company based in the United States
Morphosis, a US-based architecture, engineering, and design firm. It's the renowned architecture practice founded by Thom Mayne, known for landmark buildings worldwide.
Those who are subscribers and have seen the combo list posts, I'm currently deduping when the thread title is similar on another forum. Do you want those posts from other forums as well... combo list only?
Anonymous Poll
38%
Yes
45%
No
7%
Doesn't Matter
10%
Show Results
❤1
🔪 Slice For Life 🔪
‼️BreachForums scammer, N/A, has allegedly been d*xed. 👇 https://x.com/KeyserSoze1337/status/2041176134641996009
[.]st PwnForums now has a "Wall fo Shame" section, now beginning with N/A.
❤1😁1
🔪 Slice For Life 🔪
[.]st PwnForums now has a "Wall fo Shame" section, now beginning with N/A.
The email is clean in Whiteintel.io in case you were curious.
‼️🇷🇺 Forum IP Leak: ascarding[.]net
IP: 94.159.113.232
Ports: 22, 88
ASN: 216234
IP: 94.159.113.233
Ports: 22, 88
ASN: 216234
IP: 94.159.113.232
Ports: 22, 88
ASN: 216234
IP: 94.159.113.233
Ports: 22, 88
ASN: 216234
Cyberattack News Alert
━━━━━━━━━━━━━━━━━━━━━━━━━
Victim: Signature Healthcare
Domain:
Country: 🇺🇸 US
Date: Apr 6th, 2026
Summary:
Signature Healthcare and Brockton hospital confirmed a cybersecurity incident disrupting certain computer systems, resulting in ambulance traffic diversion and cancellation of chemotherapy infusion services for April 6. While emergency services and scheduled surgical procedures continue, retail pharmacies were closed and patients reported significant delays and increased stress during their visits. The facility activated offline operating procedures and is working with external partners to investigate and restore operations as quickly as possible.
Source: https://www.wcvb.com/article/brockton-hospital-services-affected-by-cyber-incident/70944847
━━━━━━━━━━━━━━━━━━━━━━━━━
Victim: Signature Healthcare
Domain:
signature-healthcare.orgCountry: 🇺🇸 US
Date: Apr 6th, 2026
Summary:
Signature Healthcare and Brockton hospital confirmed a cybersecurity incident disrupting certain computer systems, resulting in ambulance traffic diversion and cancellation of chemotherapy infusion services for April 6. While emergency services and scheduled surgical procedures continue, retail pharmacies were closed and patients reported significant delays and increased stress during their visits. The facility activated offline operating procedures and is working with external partners to investigate and restore operations as quickly as possible.
Source: https://www.wcvb.com/article/brockton-hospital-services-affected-by-cyber-incident/70944847
WCVB
Brockton hospital hit by cybersecurity incident, services affected
Signature Healthcare says a cybersecurity incident is affecting some systems, with ambulance traffic diverted and some services disrupted.
😭1