🚨🇦🇪 Bayut allegedly breached: 986K real estate customer records and identity documents exposed

A threat actor claims to have leaked a large dataset allegedly tied to Bayut, one of the UAE’s major real estate platforms.

━━━━━━━━━━━━━━━━━━━━
Target: Bayut
Sector: Real Estate / Property Technology / Customer Data
Incident: Data Leak
Exposure: 986,506 records
Actor: attacker_company
Country: United Arab Emirates
Date: 19/05/2026
━━━━━━━━━━━━━━━━━━━━

What’s allegedly included:

▪️ Customer records allegedly linked to Bayut
▪️ Full names and login/user identifier fields
▪️ Password-related values
▪️ Phone numbers, WhatsApp contact fields, and email addresses
▪️ IP address logs and location classification fields
▪️ Physical address and ZIP/postal data
▪️ Passport, Golden Card, and ID document images
▪️ Title deed and property ownership document samples

Potential impact:

The exposed data could be used for identity theft, real estate fraud, account takeover, phishing, property-owner impersonation, and targeted scams against Bayut users and customers.

Status:

Unverified underground forum claim. The actor posted sample identity documents, property ownership document previews, and claims additional personal information data is hidden behind forum access.

Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations

🚨🇩🇪 Saarland University allegedly breached: 42K student database records leaked

A threat actor claims to have published the full student database tied to Saarland University, a public research university in Germany.

━━━━━━━━━━━━━━━━━━━━
Target: Saarland University
Sector: Education / Higher Education / Student Records
Incident: Database Leak
Exposure: 42K student records
Actor: StrikerDE
Country: Germany
Date: 19/05/2026
━━━━━━━━━━━━━━━━━━━━

What’s allegedly included:

▪️ Student database records allegedly linked to Saarland University
▪️ User and account profile fields
▪️ Names and university email addresses
▪️ Location and country-related fields
▪️ Role or permission-related account metadata
▪️ Student and import-related system records
▪️ Moodle user and course-related file references
▪️ Compressed and uncompressed database files referenced by the actor

Potential impact:

The exposed data could be used for phishing, credential targeting, student impersonation, account takeover attempts, and social engineering against students, faculty, and university staff.

Status:

Unverified underground forum claim. The actor posted sample student records and claims the download is hidden behind forum access.

Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations

🚨🇦🇷 Ruca Baruk Boxer allegedly leaked: 624K personal and contact records exposed

A threat actor using the alias Databasehooligan claims to be selling a dataset allegedly originating from rucabarukboxer.com.ar, an Argentina-based organization connected to dog owner, dog profile, and service booking records.

The actor claims the dataset includes approximately 624,000 records across contacts, dog profiles, and service bookings.

━━━━━━━━━━━━━━━━━━━━
Target: Ruca Baruk Boxer
Country: Argentina
Sector: Pet Services / Dog Breeding / Customer Records
Incident Type: Alleged Database Sale
Claimed Exposure: 624K records
Actor: Databasehooligan
Price: $1,200
━━━━━━━━━━━━━━━━━━━━

According to the post, the dataset allegedly contains customer contact details, emails, phone numbers, addresses, usernames, national ID fields, profile metadata, dog breed and health-related information, vaccination details, microchip numbers, service appointment records, payment status fields, booking notes, feedback notes, and related operational data.

Why it matters:

If authentic, this data could be abused for phishing, identity targeting, customer impersonation, fraud, social engineering, and targeted scams involving pet owners or service customers.

Status:

This remains an unverified underground forum claim. The actor posted sample file links and claims the dataset is available for purchase.

Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations

🚨 GitHub source code allegedly offered for sale: Internal orgs and private repositories claimed

A threat actor using the alias TeamPCP claims to be selling GitHub source code and internal organization data.

The actor claims the dataset includes around 4,000 private repositories and says samples can be provided to interested buyers to verify authenticity.

━━━━━━━━━━━━━━━━━━━━
Target: GitHub
Country: United States
Sector: Technology / Software Development / Source Code
Incident Type: Alleged Source Code Sale
Claimed Exposure: Around 4,000 private repositories
Actor: TeamPCP
Price: Offers over $50,000
━━━━━━━━━━━━━━━━━━━━

According to the post, the actor claims the material includes source code and internal organization data tied to GitHub’s main platform. The post also references a public file list and includes screenshots showing numerous repository archive names.

Why it matters:

If authentic, exposed source code and internal repository data could increase the risk of code review by hostile actors, vulnerability discovery, supply chain targeting, impersonation, phishing, and follow-on attacks against developer infrastructure.

Status:

This remains an unverified underground forum claim. The actor states this is not a ransom attempt and claims the data may be leaked publicly if no buyer is found.

Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations