🚨🇫🇷 EVA user and booking data allegedly leaked
A forum actor claims to have breached EVA, a French gaming venue and reservation platform, and released data allegedly obtained through the company’s GraphQL API.
The listing advertises approximately 70,400 user accounts and 119,000 booking records. The actor also claims to have accessed information covering 63 locations in France, 99 vendors, 764 products, 10 games, store collections, playing fields, seasons, scores, and internal CSV exports.
The allegedly exposed information includes names, usernames, email addresses, phone numbers, birth dates, genders, home addresses, account roles, language preferences, battle pass details, booking dates, venue information, reservation statuses, order references, and session data.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io in the 2nd screenshot.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached EVA, a French gaming venue and reservation platform, and released data allegedly obtained through the company’s GraphQL API.
The listing advertises approximately 70,400 user accounts and 119,000 booking records. The actor also claims to have accessed information covering 63 locations in France, 99 vendors, 764 products, 10 games, store collections, playing fields, seasons, scores, and internal CSV exports.
The allegedly exposed information includes names, usernames, email addresses, phone numbers, birth dates, genders, home addresses, account roles, language preferences, battle pass details, booking dates, venue information, reservation statuses, order references, and session data.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io in the 2nd screenshot.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇸🇦 iYelo employee data allegedly listed for sale
A forum actor claims to be selling 9.75GB of sensitive employee information allegedly obtained from iYelo, a Saudi Arabian car rental company.
The listing says the material contains internal employment and administrative documents covering vacations, contracts, leave requests, duty resumptions, evaluations, probation, absences, resignations, terminations, employee transfers, disciplinary warnings, sick leave, and service records.
No asking price was disclosed, but the seller described the data as older material and said it may be released for free if the company does not make contact.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to be selling 9.75GB of sensitive employee information allegedly obtained from iYelo, a Saudi Arabian car rental company.
The listing says the material contains internal employment and administrative documents covering vacations, contracts, leave requests, duty resumptions, evaluations, probation, absences, resignations, terminations, employee transfers, disciplinary warnings, sick leave, and service records.
No asking price was disclosed, but the seller described the data as older material and said it may be released for free if the company does not make contact.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇧🇷 São Paulo State Department of Education student dataset allegedly listed for sale
A forum actor claims to be selling a student dataset allegedly extracted through the API of Sala do Futuro, the official platform operated by the São Paulo State Department of Education.
The listing advertises 4,068,441 records covering approximately 1,480 cities across the state.
The allegedly exposed information includes student IDs, full names, CPF and RG identity numbers, dates of birth, genders, email addresses, parents’ names, complete home addresses, geographic coordinates, and class enrollment details.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to be selling a student dataset allegedly extracted through the API of Sala do Futuro, the official platform operated by the São Paulo State Department of Education.
The listing advertises 4,068,441 records covering approximately 1,480 cities across the state.
The allegedly exposed information includes student IDs, full names, CPF and RG identity numbers, dates of birth, genders, email addresses, parents’ names, complete home addresses, geographic coordinates, and class enrollment details.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇫🇷 Accor customer dataset allegedly listed for sale
A forum actor claims to have breached Accor, a French multinational hospitality group, after using an employee account to access an internal tool known as LUKE.
The listing advertises a partial dataset containing 162,437 records and claims the actor also gained access to Accor’s internal network, corporate VPN, and other internal systems. The seller alleges that information belonging to tens of millions of customers was accessible, but says the extraction was interrupted after the activity was detected.
A sample containing 1,153 customer records was published with the post. No asking price was disclosed.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached Accor, a French multinational hospitality group, after using an employee account to access an internal tool known as LUKE.
The listing advertises a partial dataset containing 162,437 records and claims the actor also gained access to Accor’s internal network, corporate VPN, and other internal systems. The seller alleges that information belonging to tens of millions of customers was accessible, but says the extraction was interrupted after the activity was detected.
A sample containing 1,153 customer records was published with the post. No asking price was disclosed.
This claim is currently unverified. Infostealer data courtesy of @whiteintel_io.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
‼️🇧🇷 RansomHouse ransomware claims 1 victim. Infostealer data courtesy of @whiteintel_io.
🇧🇷 Megawork - Brazilian SAP consultancy specializing in SAP S/4HANA, Microsoft Power Platform, ERP implementation, application management, and IT services.
🇧🇷 Megawork - Brazilian SAP consultancy specializing in SAP S/4HANA, Microsoft Power Platform, ERP implementation, application management, and IT services.
‼️ The Gentlemen ransomware claims 17 victims
🇺🇸 Terry P. Moosmann CPA PC - Missouri-based accounting firm providing tax preparation, bookkeeping, payroll, and financial services.
🇸🇪 Byggelit Sverige - Swedish manufacturer producing sustainable and customized particleboard solutions.
🇯🇵 Kaneko - Japanese software company developing construction project and management solutions.
🇨🇿 Město Čelákovice - Municipal government serving the town of Čelákovice in the Czech Republic.
🇲🇨 Giraudi Group - Monaco-based importer and distributor of premium meats that also operates restaurants and lifestyle brands.
🇵🇱 LSN - Polish software development company providing customized IT solutions primarily for the insurance industry.
🇯🇵 Dink Co Ltd - Japanese company specializing in industrial water treatment systems and equipment.
🇫🇷 Vignobles Toutigeac - Family-owned French winery producing red and white Bordeaux wines near Targon.
🇫🇷 Terra Vitis - French sustainable winemaking certification and network representing environmentally responsible vineyards.
🇸🇪 Tooltec - Swedish precision manufacturing company producing machined components for the automotive, energy, and aerospace industries.
🇭🇺 ALUFE Fémszerkezeti Kft - Hungarian manufacturer of aluminium windows, doors, curtain walls, and complex facade systems.
🇩🇪 Landesbibliothek Coburg - Regional scientific library in Coburg, Germany, housing extensive historical and cultural collections.
🇹🇼 Comet Enterprise Corp - Taiwanese distributor of industrial bearings, machine tools, and maintenance equipment.
🇵🇹 Metro Mondego - Portuguese public transport operator responsible for the Metrobus network in the Coimbra region.
🇩🇪 Hanseata - German flat-glass wholesaler supplying glass products and energy-efficient glazing solutions.
🇫🇮 Gallant - Finnish advisory and accounting company providing financial, HR, legal, and business support services.
🇺🇸 CustomsWatch - Anti-counterfeiting intelligence and product-protection company serving major pharmaceutical manufacturers.
🇺🇸 Terry P. Moosmann CPA PC - Missouri-based accounting firm providing tax preparation, bookkeeping, payroll, and financial services.
🇸🇪 Byggelit Sverige - Swedish manufacturer producing sustainable and customized particleboard solutions.
🇯🇵 Kaneko - Japanese software company developing construction project and management solutions.
🇨🇿 Město Čelákovice - Municipal government serving the town of Čelákovice in the Czech Republic.
🇲🇨 Giraudi Group - Monaco-based importer and distributor of premium meats that also operates restaurants and lifestyle brands.
🇵🇱 LSN - Polish software development company providing customized IT solutions primarily for the insurance industry.
🇯🇵 Dink Co Ltd - Japanese company specializing in industrial water treatment systems and equipment.
🇫🇷 Vignobles Toutigeac - Family-owned French winery producing red and white Bordeaux wines near Targon.
🇫🇷 Terra Vitis - French sustainable winemaking certification and network representing environmentally responsible vineyards.
🇸🇪 Tooltec - Swedish precision manufacturing company producing machined components for the automotive, energy, and aerospace industries.
🇭🇺 ALUFE Fémszerkezeti Kft - Hungarian manufacturer of aluminium windows, doors, curtain walls, and complex facade systems.
🇩🇪 Landesbibliothek Coburg - Regional scientific library in Coburg, Germany, housing extensive historical and cultural collections.
🇹🇼 Comet Enterprise Corp - Taiwanese distributor of industrial bearings, machine tools, and maintenance equipment.
🇵🇹 Metro Mondego - Portuguese public transport operator responsible for the Metrobus network in the Coimbra region.
🇩🇪 Hanseata - German flat-glass wholesaler supplying glass products and energy-efficient glazing solutions.
🇫🇮 Gallant - Finnish advisory and accounting company providing financial, HR, legal, and business support services.
🇺🇸 CustomsWatch - Anti-counterfeiting intelligence and product-protection company serving major pharmaceutical manufacturers.
‼️ New Dark Web Informer Blog Post!
Title: French Firefighters Federation Membership Platform Allegedly Breached, Data on Nearly 125,000 Members Leaked
Link: https://darkwebinformer.com/french-firefighters-federation-membership-platform-allegedly-breached-data-on-nearly-125-000-members-leaked/
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: French Firefighters Federation Membership Platform Allegedly Breached, Data on Nearly 125,000 Members Leaked
Link: https://darkwebinformer.com/french-firefighters-federation-membership-platform-allegedly-breached-data-on-nearly-125-000-members-leaked/
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
French Firefighters Federation Membership Platform Allegedly Breached, Data on Nearly 125,000 Members Leaked
A threat actor using the alias ChimeraZ claims to be leaking a database from the French Firefighters Federation (Fédération nationale des sapeurs-pompiers de France), specifically its official online membership platform (pompiers.fr).
🚨🇮🇩 VPN access to Indonesian technology company allegedly listed for sale
A forum actor claims to be selling OpenVPN access to an unidentified Indonesian technology and SaaS company.
The listing says the access includes local administrator privileges and identifies Carbon Black as the organization’s endpoint security platform.
The target is described as generating between $1 billion and $5 billion in revenue and operating a network of approximately 2,500 hosts.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to be selling OpenVPN access to an unidentified Indonesian technology and SaaS company.
The listing says the access includes local administrator privileges and identifies Carbon Black as the organization’s endpoint security platform.
The target is described as generating between $1 billion and $5 billion in revenue and operating a network of approximately 2,500 hosts.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
‼️ PLAY ransomware claims 5 victims
🇸🇪 Svensk Direktreklam - Swedish direct marketing company distributing advertising leaflets and local newspapers nationwide.
🇺🇸 Andorra Life - California-based health products company wholesaling and retailing nutritional supplements.
🇳🇱 A.G. Scholtes - Dutch meat wholesaler supplying beef products to butchers, hospitality businesses, supermarkets, and manufacturers.
🇬🇧 Wring Group - British contractor specializing in demolition, asbestos removal, environmental services, waste management, and recycling.
🇺🇸 Boston Electric and Telephone - Massachusetts-based contractor providing electrical, telecommunications, data networking, and security services.
🇸🇪 Svensk Direktreklam - Swedish direct marketing company distributing advertising leaflets and local newspapers nationwide.
🇺🇸 Andorra Life - California-based health products company wholesaling and retailing nutritional supplements.
🇳🇱 A.G. Scholtes - Dutch meat wholesaler supplying beef products to butchers, hospitality businesses, supermarkets, and manufacturers.
🇬🇧 Wring Group - British contractor specializing in demolition, asbestos removal, environmental services, waste management, and recycling.
🇺🇸 Boston Electric and Telephone - Massachusetts-based contractor providing electrical, telecommunications, data networking, and security services.
💥 I will be adding my repositories from GitHub to my own site this weekend. I've added Telegram Checker for now. You cannot register, only view... for the time being. I will update once everything has been migrated.
Link: https://git.darkwebinformer.com/
Link: https://git.darkwebinformer.com/
🚨🇺🇸 West Village Uptown Dallas WordPress dataset allegedly leaked
A forum actor claims to have released a complete WordPress dataset allegedly obtained from the West Village Uptown Dallas website.
The listing says the material includes the site’s complete WordPress data and provides a sample containing an administrator account record.
The allegedly exposed information includes usernames, password hashes, email addresses, display names, account registration dates, user status details, activation keys, and other WordPress site data.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have released a complete WordPress dataset allegedly obtained from the West Village Uptown Dallas website.
The listing says the material includes the site’s complete WordPress data and provides a sample containing an administrator account record.
The allegedly exposed information includes usernames, password hashes, email addresses, display names, account registration dates, user status details, activation keys, and other WordPress site data.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
❤1
‼️ CVE-2026-3891: A critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0.
PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
🔥1
‼️ CVE-2026-15409: PoC exploit for CVE-2026-15409 that achieves non-root remote code execution on SonicWall SMA 1000 appliances.
GitHub: https://github.com/remmons-r7/rapid7-CVE-2026-15409
GitHub: https://github.com/remmons-r7/rapid7-CVE-2026-15409
‼️ The Coca-Cola Company has filed form 8-K due to a cybersecurity incident on behalf of fairlife, LLC.
"On July 16, 2026, The Coca-Cola Company (the “Company”) announced that fairlife, LLC (“fairlife”), a dairy company owned by the Company, identified unauthorized access by a third party to a portion of its systems, including its production-related systems, in connection with a ransomware event.
After detecting the issue, the Company promptly activated its incident response and business continuity protocols. The Company’s investigation and assessment of the impact of the incident is ongoing, with the assistance of outside advisors and cybersecurity experts. The Company has also notified law enforcement.
Product quality and safety have not been impacted. However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended. fairlife’s Canada production operations are not currently impacted.
The Company is working diligently to complete the investigation and restore the systems and impacted operations. The full scope, nature and impacts of the incident are not yet known. Accordingly, the Company has not yet determined whether the incident is reasonably likely to materially affect the Company.
The information in this Form 8-K shall not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, nor shall it be deemed incorporated by reference in any filing under the Securities Act of 1933, except as shall be expressly set forth by specific reference in such filing."
Source: https://www.sec.gov/Archives/edgar/data/21344/000162828026048466/ko-20260716.htm
"On July 16, 2026, The Coca-Cola Company (the “Company”) announced that fairlife, LLC (“fairlife”), a dairy company owned by the Company, identified unauthorized access by a third party to a portion of its systems, including its production-related systems, in connection with a ransomware event.
After detecting the issue, the Company promptly activated its incident response and business continuity protocols. The Company’s investigation and assessment of the impact of the incident is ongoing, with the assistance of outside advisors and cybersecurity experts. The Company has also notified law enforcement.
Product quality and safety have not been impacted. However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended. fairlife’s Canada production operations are not currently impacted.
The Company is working diligently to complete the investigation and restore the systems and impacted operations. The full scope, nature and impacts of the incident are not yet known. Accordingly, the Company has not yet determined whether the incident is reasonably likely to materially affect the Company.
The information in this Form 8-K shall not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, nor shall it be deemed incorporated by reference in any filing under the Securities Act of 1933, except as shall be expressly set forth by specific reference in such filing."
Source: https://www.sec.gov/Archives/edgar/data/21344/000162828026048466/ko-20260716.htm
😁1