π¨πͺπ¬ Six Egyptian public universities allegedly breached, 7.76M records and live credentials leaked on a cybercrime forum
β
A forum user claims to have released data from six Egyptian public universities, totaling 7,761,608 records across 87 tables. The listing says the data was previously posted publicly with a 48-hour window to begin negotiations, but no contact was made.
β
The affected universities are claimed to include:
β
β’ Benha University, 3,078,560 records
β’ Helwan University, 2,834,174 records
β’ Cairo University, 551,252 records
β’ Kafr El Sheikh University, 739,533 records
β’ South Valley University, 551,371 records
β’ University of Sadat City, 6,718 records
β
The advertised data includes:
β
β’ Full names and email addresses
β’ Plaintext passwords
β’ 14-digit national ID numbers
β’ Dates of birth
β’ Religion and gender information
β’ Phone numbers
β’ Occupation and employer information
β’ Vaccine status
β’ Login logs with timestamps and source IPs
β’ Passwords captured from login attempts
β’ More than 1.9 million email log records
β’ Faculty, program and GPA information
β’ Thesis defense dates
β’ Passport records
β’ Administrative and staff records
β’ Staff names, titles and national IDs
β
The listing also claims more than 100,000 scanned documents will be released in a follow-up, including national ID cards, birth certificates, treasury payment receipts and student photographs.
β
Sample records from multiple universities were published directly in the thread, including registration data, login logs and staff information.
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum user claims to have released data from six Egyptian public universities, totaling 7,761,608 records across 87 tables. The listing says the data was previously posted publicly with a 48-hour window to begin negotiations, but no contact was made.
β
The affected universities are claimed to include:
β
β’ Benha University, 3,078,560 records
β’ Helwan University, 2,834,174 records
β’ Cairo University, 551,252 records
β’ Kafr El Sheikh University, 739,533 records
β’ South Valley University, 551,371 records
β’ University of Sadat City, 6,718 records
β
The advertised data includes:
β
β’ Full names and email addresses
β’ Plaintext passwords
β’ 14-digit national ID numbers
β’ Dates of birth
β’ Religion and gender information
β’ Phone numbers
β’ Occupation and employer information
β’ Vaccine status
β’ Login logs with timestamps and source IPs
β’ Passwords captured from login attempts
β’ More than 1.9 million email log records
β’ Faculty, program and GPA information
β’ Thesis defense dates
β’ Passport records
β’ Administrative and staff records
β’ Staff names, titles and national IDs
β
The listing also claims more than 100,000 scanned documents will be released in a follow-up, including national ID cards, birth certificates, treasury payment receipts and student photographs.
β
Sample records from multiple universities were published directly in the thread, including registration data, login logs and staff information.
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
βΌοΈ New Dark Web Informer Blog Post!
Title: Nearly a Million French Customers of a Baby Goods Retailer Allegedly Exposed With Delivery Addresses
Link: https://darkwebinformer.com/nearly-a-million-french-customers-of-a-baby-goods-retailer-allegedly-exposed-with-delivery-addresses/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Nearly a Million French Customers of a Baby Goods Retailer Allegedly Exposed With Delivery Addresses
Link: https://darkwebinformer.com/nearly-a-million-french-customers-of-a-baby-goods-retailer-allegedly-exposed-with-delivery-addresses/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Nearly a Million French Customers of a Baby Goods Retailer Allegedly Exposed With Delivery Addresses
A forum user posting as ChimeraZ is selling what they describe as the database of madeinbebe.com, a French retailer of products for babies and children, comprising 1,359,546 invoice lines covering 960,106 people in 1.45GB of JSON.
βΌοΈ New Dark Web Informer Blog Post!
Title: Second French Baby Retailer Allegedly Breached the Same Morning, This Time With Building Entry Codes
Link: https://darkwebinformer.com/second-french-baby-retailer-allegedly-breached-the-same-morning-this-time-with-building-entry-codes/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Second French Baby Retailer Allegedly Breached the Same Morning, This Time With Building Entry Codes
Link: https://darkwebinformer.com/second-french-baby-retailer-allegedly-breached-the-same-morning-this-time-with-building-entry-codes/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Second French Baby Retailer Allegedly Breached the Same Morning, This Time With Building Entry Codes
A forum user posting as ChimeraZ is selling what they describe as the database of allobebe.fr, a French retailer of baby products and childcare equipment, covering 2,175,216 records across 1,136,058 people and spanning orders placed from 2006 through 2026.
βΌοΈ New Dark Web Informer Blog Post!
Title: Saudi Automotive Marketplace Speero Allegedly Dumped in Full, Including Password and Reset Token Fields
Link: https://darkwebinformer.com/saudi-automotive-marketplace-speero-allegedly-dumped-in-full-including-password-and-reset-token-fields/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Saudi Automotive Marketplace Speero Allegedly Dumped in Full, Including Password and Reset Token Fields
Link: https://darkwebinformer.com/saudi-automotive-marketplace-speero-allegedly-dumped-in-full-including-password-and-reset-token-fields/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Saudi Automotive Marketplace Speero Allegedly Dumped in Full, Including Password and Reset Token Fields
A newly registered user posting as UNC2030 is offering what they describe as a complete dump of speero.net, a Riyadh based marketplace for car parts and maintenance services, comprising 83 tables and 11GB of CSV data.
πͺ Slice For Life - Part 2 πͺ
βΌοΈ IGN is reporting via Kotaku that Take-Two is seeking information from Microsoft and Discord as investigation into GTA 6 leaker expands with federal subpoenas CyberLeek... you sir are fucked.
The DMCA filings/subpoena from Take-Two can be found on Courtlistener.com.
Link: https://www.courtlistener.com/docket/74679284/take-two-interactive-software-inc/
Link: https://www.courtlistener.com/docket/74679284/take-two-interactive-software-inc/
π2
βΌοΈ New Dark Web Informer Blog Post!
Title: Iraqi Electoral Commission Data Allegedly Offered for Sale, Covering 31 Million Citizens
Link: https://darkwebinformer.com/iraqi-electoral-commission-data-allegedly-offered-for-sale-covering-31-million-citizens/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Iraqi Electoral Commission Data Allegedly Offered for Sale, Covering 31 Million Citizens
Link: https://darkwebinformer.com/iraqi-electoral-commission-data-allegedly-offered-for-sale-covering-31-million-citizens/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Iraqi Electoral Commission Data Allegedly Offered for Sale, Covering 31 Million Citizens
A forum user posting as Knox is selling what they describe as voter registration data from Iraq's Independent High Electoral Commission, claiming records on 31 million Iraqis including 28 million phone numbers, with the intrusion dated to August 2026.
DNS Information for cyberleek.ar.io
A Records
AAAA Records
CNAME Records
MX Records
NS Records
SOA Record
TXT Records
A Records
162.55.156.39
49.13.45.141
AAAA Records
No record found
CNAME Records
No record found
MX Records
No record found
NS Records
No record found
SOA Record
No record found
TXT Records
No record found
Who the fuck just wakes up one day and is like... fuck it I'm going to leak GTA 6 gameplay and go to prison for it.
π5π3
βΌοΈ New Dark Web Informer Blog Post!
Title: French Beauty Retailer Data Allegedly Up for Sale, With the Seller Crediting a Third Party Source
Link: https://darkwebinformer.com/french-beauty-retailer-data-allegedly-up-for-sale-with-the-seller-crediting-a-third-party-source/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: French Beauty Retailer Data Allegedly Up for Sale, With the Seller Crediting a Third Party Source
Link: https://darkwebinformer.com/french-beauty-retailer-data-allegedly-up-for-sale-with-the-seller-crediting-a-third-party-source/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
French Beauty Retailer Data Allegedly Up for Sale, With the Seller Crediting a Third Party Source
A forum user posting as misere is selling what they describe as the database of beautysuccess.fr, a French beauty and cosmetics retailer, listing 10,279,819 total records reducing to 5,169,727 unique.
βΌοΈ New Dark Web Informer Blog Post!
Title: Bureau VallΓ©e Customer Data Allegedly Taken From a Supplier That Exported Every Store Daily
Link: https://darkwebinformer.com/bureau-vallee-customer-data-allegedly-taken-from-a-supplier-that-exported-every-store-daily/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Bureau VallΓ©e Customer Data Allegedly Taken From a Supplier That Exported Every Store Daily
Link: https://darkwebinformer.com/bureau-vallee-customer-data-allegedly-taken-from-a-supplier-that-exported-every-store-daily/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Bureau VallΓ©e Customer Data Allegedly Taken From a Supplier That Exported Every Store Daily
A forum user posting as misere is selling what they describe as the customer database of bureau-vallee.fr, a French office supplies chain, listing 13,725,669 total records reducing to 4,819,927 unique.
Fixed a bug in the API that was causing ransomware screenshots to remain null if they weren't successfully captured during the initial scrape, even if the screenshot was captured successfully afterward.
Screenshot URLs are now displaying properly for each claim. If you still see null, it means I don't currently have a scraper for that particular ransomware group.
Screenshot URLs are now displaying properly for each claim. If you still see null, it means I don't currently have a scraper for that particular ransomware group.
β€1
π¨π²π½ Municipal Government of Altamira allegedly breached, database and admin access leaked on a cybercrime forum
β
A forum user claims to have compromised the Municipal Government of Altamira, Tamaulipas, Mexico, releasing access and data allegedly taken from an active government server. The breach is dated August 14, 2026.
β
The advertised access and data includes:
β
β’ Administrative username and password credentials
β’ Active JWT session cookie
β’ Server technology information
β’ Access to an official DIF travel database
β’ Travel and trip records
β’ Travel expense information
β’ Reimbursement records
β’ Traveler information
β’ Locations and dates
β’ Financial amount fields
β
The claims and the authenticity, source and scope of the allegedly exposed data and administrative access have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum user claims to have compromised the Municipal Government of Altamira, Tamaulipas, Mexico, releasing access and data allegedly taken from an active government server. The breach is dated August 14, 2026.
β
The advertised access and data includes:
β
β’ Administrative username and password credentials
β’ Active JWT session cookie
β’ Server technology information
β’ Access to an official DIF travel database
β’ Travel and trip records
β’ Travel expense information
β’ Reimbursement records
β’ Traveler information
β’ Locations and dates
β’ Financial amount fields
β
The claims and the authenticity, source and scope of the allegedly exposed data and administrative access have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
CYBERLEEK.. create a PGP and sign your messages.
π6β€2