โผ๏ธ New Dark Web Informer Blog Post!
Title: Twelve Databases Leaked in Single Dump, 14,453 Customer Records From WordPress Sites Exposed
Link: https://darkwebinformer.com/twelve-databases-leaked-in-single-dump-14-453-customer-records-from-wordpress-sites-exposed/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Twelve Databases Leaked in Single Dump, 14,453 Customer Records From WordPress Sites Exposed
Link: https://darkwebinformer.com/twelve-databases-leaked-in-single-dump-14-453-customer-records-from-wordpress-sites-exposed/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Twelve Databases Leaked in Single Dump, 14,453 Customer Records From WordPress Sites Exposed
A forum user posting as NightBroker has published 12 databases in a single release, claiming the sites were located through search engine reconnaissance and required minimal effort to access.
๐จ๐ฉ๐ฟ๐ฌ๐ง๐ช๐จ VPN credentials for three organizations allegedly offered for sale
โ
A forum actor is advertising access to three organizations across Algeria, the United Kingdom and Ecuador. The seller claims the credentials have been verified and requires transactions to use escrow.
โ
The listings include:
โ
โข ๐ฉ๐ฟ Algeria Ministry of Commerce VPN access: $500
โข ๐ฌ๐ง UK cloud-based provider web VPN access: $200
โข ๐ช๐จ Ecuador national university access: $200
โ
The UK provider is described as generating more than $8 million in revenue. No revenue figures or further access details were provided for the Algerian ministry or Ecuadorian university.
โ
These claims are currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โ
A forum actor is advertising access to three organizations across Algeria, the United Kingdom and Ecuador. The seller claims the credentials have been verified and requires transactions to use escrow.
โ
The listings include:
โ
โข ๐ฉ๐ฟ Algeria Ministry of Commerce VPN access: $500
โข ๐ฌ๐ง UK cloud-based provider web VPN access: $200
โข ๐ช๐จ Ecuador national university access: $200
โ
The UK provider is described as generating more than $8 million in revenue. No revenue figures or further access details were provided for the Algerian ministry or Ecuadorian university.
โ
These claims are currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โผ๏ธ New Dark Web Informer Blog Post!
Title: BudBoard Storage Bucket Allegedly Left Public, Exposing 18 Dispensaries and a Production POS Integration Key
Link: https://darkwebinformer.com/budboard-storage-bucket-allegedly-left-public-exposing-18-dispensaries-and-a-production-pos-integration-key/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: BudBoard Storage Bucket Allegedly Left Public, Exposing 18 Dispensaries and a Production POS Integration Key
Link: https://darkwebinformer.com/budboard-storage-bucket-allegedly-left-public-exposing-18-dispensaries-and-a-production-pos-integration-key/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
BudBoard Storage Bucket Allegedly Left Public, Exposing 18 Dispensaries and a Production POS Integration Key
An actor posting as exfilar claims that BudBoard, a US cannabis digital signage platform providing dispensary screen management and point-of-sale integration, left its cloud storage bucket publicly readable with no authentication.
ZeroOsintX: A powerful OSINT toolkit designed for security researchers and penetration testers.
GitHub: https://github.com/roothackerslab/ZeroOsintX
It gathers intelligence on domains, IP addresses, email addresses, phone numbers, and social media accounts, then presents the findings in polished, interactive reports.
GitHub: https://github.com/roothackerslab/ZeroOsintX
It gathers intelligence on domains, IP addresses, email addresses, phone numbers, and social media accounts, then presents the findings in polished, interactive reports.
โค1
โ ๏ธ Boltz has disabled swap services until further notice after a sharp rise in automated, AI-assisted attacks targeting its infrastructure. They state no user funds were at risk, refunds remain available, and support is still online.
Source: https://boltz.exchange/
Source: https://boltz.exchange/
โค1
โผ๏ธ New Dark Web Informer Blog Post!
Title: Canadian Hacker Pleads Guilty in Cloud Breach Spree Affecting More Than 165 Organizations
Link: https://darkwebinformer.com/canadian-hacker-pleads-guilty-in-cloud-breach-spree-affecting-more-than-165-organizations/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Canadian Hacker Pleads Guilty in Cloud Breach Spree Affecting More Than 165 Organizations
Link: https://darkwebinformer.com/canadian-hacker-pleads-guilty-in-cloud-breach-spree-affecting-more-than-165-organizations/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Canadian Hacker Pleads Guilty in Cloud Breach Spree Affecting More Than 165 Organizations
A Canadian man has pleaded guilty to participating in a widespread cloud hacking and extortion campaign that compromised more than 165 organizations and exposed information belonging to at least 100 million people.
โผ๏ธ๐บ๐ธ A forum user is seeking to buy or take a percentage cut of network accesses to US healthcare/pharma organizations, requesting details such as AV, access type, revenue, and host/credential counts (DU/DA).
The buyer specifies target company revenue ranging from 50 million to 100 billion USD and offers escrow.
The buyer specifies target company revenue ranging from 50 million to 100 billion USD and offers escrow.
๐จ๐ซ๐ท Maxi Zoo customer records allegedly offered for sale
โ
A forum actor claims to be selling a database belonging to Maxi Zoo, a major pet supplies retailer operating in France.
โ
The listing advertises 3,416,030 customer records dated August 1, 2026, including:
โ
โข First and last names
โข Primary and secondary phone numbers
โข Email addresses
โข Street addresses
โข Postal codes and cities
โ
A sample was published alongside the listing. The full dataset is priced at $700.
โ
This claim is currently unverified.
โ
๐ฅ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
โ
A forum actor claims to be selling a database belonging to Maxi Zoo, a major pet supplies retailer operating in France.
โ
The listing advertises 3,416,030 customer records dated August 1, 2026, including:
โ
โข First and last names
โข Primary and secondary phone numbers
โข Email addresses
โข Street addresses
โข Postal codes and cities
โ
A sample was published alongside the listing. The full dataset is priced at $700.
โ
This claim is currently unverified.
โ
๐ฅ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
๐จ๐บ๐ธ HVMN customer and payment-related data allegedly leaked
โ
A forum actor claims to have leaked data belonging to HVMN, formerly known as Nootrobox and now operating as Ketone-IQ, a US performance nutrition company.
โ
The post advertises 86,904 user profiles, including:
โ
โข 57,209 unique email addresses
โข 44,474 unique full names
โข 48,201 unique IP addresses
โข 6,785 card-on-file records
โข 39,230 Stripe customer identifiers
โข 8,993 cities across 41 countries
โข 14,424 shipping postal codes
โข 1,273 subscription identifiers
โ
The exposed fields allegedly include:
โ
โข Names, email addresses and phone numbers
โข IP addresses and internal user identifiers
โข Shipping and billing addresses
โข Stripe customer and subscription data
โข Revenue and Google Analytics identifiers
โข Masked payment card numbers and security codes
โข Card expiration dates and billing postal codes
โข Account creation timestamps
The actor also claims additional user and event data may be released later.
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โ
A forum actor claims to have leaked data belonging to HVMN, formerly known as Nootrobox and now operating as Ketone-IQ, a US performance nutrition company.
โ
The post advertises 86,904 user profiles, including:
โ
โข 57,209 unique email addresses
โข 44,474 unique full names
โข 48,201 unique IP addresses
โข 6,785 card-on-file records
โข 39,230 Stripe customer identifiers
โข 8,993 cities across 41 countries
โข 14,424 shipping postal codes
โข 1,273 subscription identifiers
โ
The exposed fields allegedly include:
โ
โข Names, email addresses and phone numbers
โข IP addresses and internal user identifiers
โข Shipping and billing addresses
โข Stripe customer and subscription data
โข Revenue and Google Analytics identifiers
โข Masked payment card numbers and security codes
โข Card expiration dates and billing postal codes
โข Account creation timestamps
The actor also claims additional user and event data may be released later.
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
๐จ๐ฎ๐ณ Extramarks source code and website backup allegedly leaked
โ
A forum actor claims to have breached Extramarks, an Indian education technology company, and published a complete backup of the companyโs online platform.
โ
The 1.8GB compressed collection allegedly includes:
โ
โข Website source code and core application files
โข Databases
โข Uploaded media and other stored content
โข SEO files and sitemaps
โข Configuration files
โข System and application logs
โ
The actor claims the archive is available for download through a Telegram channel. No record count or details about exposed student, parent or employee information were provided.
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โ
A forum actor claims to have breached Extramarks, an Indian education technology company, and published a complete backup of the companyโs online platform.
โ
The 1.8GB compressed collection allegedly includes:
โ
โข Website source code and core application files
โข Databases
โข Uploaded media and other stored content
โข SEO files and sitemaps
โข Configuration files
โข System and application logs
โ
The actor claims the archive is available for download through a Telegram channel. No record count or details about exposed student, parent or employee information were provided.
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โค1
๐จ๐บ๐ธ Allstate-branded staging CRM data allegedly exposed through misconfigured Firebase database
โ
A forum actor claims to have discovered a publicly accessible Firebase Realtime Database tied to an Allstate-branded tax preparation and client management platform. The actor says the staging environment allowed unauthenticated read and write access.
โ
The exposed data allegedly includes:
โ
โข 968 Stripe transactions totaling approximately $182,830
โข 20 Stripe production customer identifiers
โข Seven business accounts with tax and incorporation information
โข Eleven user profiles containing names, emails, phone numbers and Social Security numbers
โข Session, ID and refresh tokens
โข Nine SMS threads containing 26 messages between agents and clients
โข Tax return documents and other conversation attachments
โข Eleven employee pay periods with hours worked
โข Six Firebase Storage download tokens
โข Billing records, invoice identifiers and payment statuses
โ
The actor claims write access was tested across five database endpoints, potentially allowing records, accounts, conversations and payment information to be modified. A database export and supporting files were also advertised for download.
โ
The post attributes the environment to Allstate, but the displayed records reference Allstate Tax LLC and other tax preparation clients. The relationship to Allstate Corporation has not been independently confirmed.
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โ
A forum actor claims to have discovered a publicly accessible Firebase Realtime Database tied to an Allstate-branded tax preparation and client management platform. The actor says the staging environment allowed unauthenticated read and write access.
โ
The exposed data allegedly includes:
โ
โข 968 Stripe transactions totaling approximately $182,830
โข 20 Stripe production customer identifiers
โข Seven business accounts with tax and incorporation information
โข Eleven user profiles containing names, emails, phone numbers and Social Security numbers
โข Session, ID and refresh tokens
โข Nine SMS threads containing 26 messages between agents and clients
โข Tax return documents and other conversation attachments
โข Eleven employee pay periods with hours worked
โข Six Firebase Storage download tokens
โข Billing records, invoice identifiers and payment statuses
โ
The actor claims write access was tested across five database endpoints, potentially allowing records, accounts, conversations and payment information to be modified. A database export and supporting files were also advertised for download.
โ
The post attributes the environment to Allstate, but the displayed records reference Allstate Tax LLC and other tax preparation clients. The relationship to Allstate Corporation has not been independently confirmed.
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
Forwarded from Dark Web Informer - Private
โผ๏ธ DOJ Press Release
โโโโโโโโโโโโโโโโโโโโโ
Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millions
Full Press Release โ justice.gov
โโโโโโโโโโโโโโโโโโโโโ
๐ต๏ธ Dark Web Informer โข DOJ Monitor
Note: DOJ articles that are not Cyber related will be removed manually.
โโโโโโโโโโโโโโโโโโโโโ
Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millions
Full Press Release โ justice.gov
โโโโโโโโโโโโโโโโโโโโโ
๐ต๏ธ Dark Web Informer โข DOJ Monitor
Note: DOJ articles that are not Cyber related will be removed manually.
Department of Justice
Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millions
Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty today to a widespread computer hacking conspiracy that resulted in the compromise of over 165 victim organizations, the theft of billions of sensitive customer records and the extortion of numerousโฆ
โค1
๐จ๐ฎ๐ฉ Starlite Indonesia customer database allegedly offered for sale
โ
A forum actor claims to be selling customer data belonging to Starlite Indonesia, a residential internet and Wi-Fi service provider operating in Indonesia.
โ
The listing advertises:
โ
โข 352,543 customer records
โข Database headers and sample records
โข A sale price of 2 XMR
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โ
A forum actor claims to be selling customer data belonging to Starlite Indonesia, a residential internet and Wi-Fi service provider operating in Indonesia.
โ
The listing advertises:
โ
โข 352,543 customer records
โข Database headers and sample records
โข A sale price of 2 XMR
โ
This claim is currently unverified.
โ
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing