Nitter announced yesterday that, after seeking legal advice, the project will continue and is in the process of bringing its instance and others back online soon.

‼️ DOJ Press Release
━━━━━━━━━━━━━━━━━━━━━

Texas Couple Sentenced for Operating Website Selling Smuggled Pesticides and Veterinary Drugs

Full Press Release → justice.gov

━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • DOJ Monitor

Note: DOJ articles that are not Cyber related will be removed manually.

🚨🇺🇸 2.7M-user dataset from U.S. social marketplace allegedly offered on a cybercrime forum
⠀
The listing describes the source as a U.S.-based social marketplace/network, though the specific platform is not identified in the post.
⠀
A threat actor using the handle KrebsonFanAccount claims to be selling a private dataset containing approximately 2.7 million users and published a sample of the purported records.
⠀
Claimed data includes:
⠀
• User IDs and usernames
• Password hashes
• Email addresses
• Display names
• Account registration dates
• User URLs
• Account status information
• Activation keys
• Spam/deletion status fields
⠀
The actor states the passwords use portable PHP password hashing and published a 1,000-record sample as proof of the claim.
⠀
The claim, source of the dataset, and total number of affected records have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇧🇷 IME Events dataset containing 502K records allegedly offered on a cybercrime forum
⠀
IME Events is a Brazilian online platform used to organize and host online events and scientific congresses.
⠀
A threat actor using the handle Sorb claims to be selling the platform’s full dataset in CSV format, containing approximately 502,000 records of personal information.
⠀
Claimed data includes:
⠀
• 498,000 unique email addresses
• 456,000 unique phone numbers
• 451,000 unique document numbers
• Full names
• bcrypt password hashes
• 16,000 unique CPF/CNPJ numbers
• 10,000 dates of birth
• 17,000 addresses
⠀
The actor is asking $500 for the dataset, states that escrow is accepted, and claims it will be sold exclusively to a single buyer. A sample was also published.
⠀
The claim and full scope of the exposed data have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API: https://darkwebinformer.com/api-details
Donations: https://darkwebinformer.com/donations
Socials: https://darkwebinformer.com/socials

🚨🇧🇷 Medgrupo and FUSVE patient data allegedly leaked and offered on a cybercrime forum
⠀
Medgrupo is a Brazilian medical education company, while FUSVE operates educational and healthcare institutions in Rio de Janeiro state, including Vassouras University Hospital.
⠀
A threat actor using the handle jacksenseofrejection claims to possess hundreds of thousands of sensitive and financial records associated with Medgrupo clients and students, along with 70,963 PDF medical imaging reports involving patients of Vassouras University Hospital.
⠀
Claimed exposed data includes:
⠀
• Client and student financial records
• Patient names
• Patient ages
• Referring physician information
• Medical imaging reports
• Examination dates
• Clinical indications
• Other sensitive medical information
⠀
The actor published samples and is asking approximately 1.25 BTC for the purported data, with an offer deadline of September 15, 2026.
⠀
The breach claim, origin of the data, and full scope of the exposure have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API: https://darkwebinformer.com/api-details
Donations: https://darkwebinformer.com/donations
Socials: https://darkwebinformer.com/socials

🚨🇮🇩 City of Balikpapan SIMPATDA database allegedly breached
⠀
Balikpapan is a major city in East Kalimantan, Indonesia, whose municipal government manages local public services, taxation, and regional administration.
⠀
A cybercrime forum actor using the handle vicmeow claims to have breached a SIMPATDA database, a system associated with managing local government revenue and taxation data.
⠀
Claimed exposed data includes:
⠀
• Resident and taxpayer information
• Tax identification and payment records
• Names and addresses
• Billing and payment status
• Tax periods and due dates
• Property and land-related records
• Administrative and operator information
• Multiple database backups and internal tables
⠀
The actor claims the leak contains tax information for residents of Balikpapan and published a downloadable archive along with sample database records.
⠀
The breach claim, source of the data, and full scope of the exposure have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇨🇴 Santiago de Cali municipal government dataset containing 600K+ records allegedly leaked
⠀
The Alcaldía de Santiago de Cali is the municipal government of Cali, Colombia, responsible for local administration, public services, taxation, and city finances.
⠀
A cybercrime forum actor using the handle arcepah claims to have obtained a dataset associated with the municipality containing more than 600,000 records and over 60 GB of data from 2024 through 2026.
⠀
Claimed data includes:
⠀
• Tax and public-finance records
• Business and taxpayer names
• NIT tax identification numbers
• Addresses
• Phone numbers
• Email addresses
• Tax declaration and filing periods
• Withholding tax information
• ICA municipal tax records
• Taxable amounts and withholding totals
• Penalties and interest information
⠀
The published sample appears to contain records associated with the municipality’s public finance and tax management operations.
⠀
The breach claim, source of the data, and full scope of the exposure have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Cyberattacks, data encryption, extortion - How cybercriminals operate

Video Credit: youtube.com/@DWDocumentary

‼️ New Dark Web Informer Blog Post!

Title: Blossom Health Records on 29,600 Mental Health Patients Offered for Sale

Link: https://darkwebinformer.com/blossom-health-records-on-29-600-mental-health-patients-offered-for-sale/

💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing

Tor VPN beta is now available on Android 👇

Blog: https://blog.torproject.org/tor-vpn-beta/

Download: https://download.torproject.org/

Lul $1999.

🚨🇫🇷 Cyberattack disrupts municipal services in Le Tampon, Réunion

The City of Le Tampon says it was hit by a cyberattack Wednesday morning that is causing major disruption across several municipal services.

The municipality says employees are currently unable to carry out some services under normal operating conditions.

Technical teams are working to gradually restore affected systems and services.

The city says it will provide additional information once reliable details become available.

Source: https://www.linfo.re/la-reunion/societe/le-tampon-la-mairie-victime-d-une-cyber-attaque-les-services-municipaux-au-ralenti

🚨🇺🇸 Severe cyberattack shuts down Springfield Public Schools for second day

Springfield Public Schools in Massachusetts says an outside group gained access to its network and blocked access to systems required to operate the district.

One of the affected systems contains vital student medical records. School nurses currently cannot access information needed to dispense medication, check allergies, and address other health issues.

Officials classified the attack as a districtwide Level 4 severe cyber incident.

Schools were closed Tuesday and Wednesday and will not reopen until nurses can safely access the medical information they need.

Other affected systems include transportation and food-related information, while the district is also unable to use its normal email systems. Students and staff have been instructed to stay off SPS networks and district-issued devices.

The FBI, Massachusetts State Police, and local authorities are assisting.

Officials have not yet confirmed whether student or staff data was stolen, whether ransomware was deployed, or who is responsible.

Source: https://www.wwlp.com/news/crime/springfield-schools-closed-as-cyberattack-locks-access-to-student-medical-records/

🚨🇺🇸 Iran-linked hackers claim responsibility for major Texas AT&T outage. AT&T says it didn't.

APT IRAN, a group closely linked to the IRGC-affiliated CyberAv3ngers, claims it targeted telecommunications infrastructure and an unidentified water utility in Texas.
⠀
The claim followed a widespread AT&T outage on September 7 that generated thousands of reports across Houston, Spring, Dallas, Fort Worth, and Austin.

AT&T acknowledged a major fiber outage affecting more than 7,000 families.
⠀
However, AT&T disputes the hackers’ claim.

The company says it has found no evidence the outage resulted from a cyberattack and that its assessment indicates attempted cable theft caused the disruption.
⠀
APT IRAN previously threatened “critical events” targeting U.S. telecommunications, energy, and water infrastructure and has claimed involvement in recent attacks against U.S. water systems.
⠀
AT&T says service has been restored and its network continues to be monitored.

Source: https://www.yahoo.com/news/us/articles/iranian-hackers-claim-credit-massive-181942480.html

‼️ New Dark Web Informer Blog Post!

Title: AdvaCare Dataset Claimed on Forum, 20,734 Timesheet Entries and 39 Staff Accounts

Link: https://darkwebinformer.com/advacare-dataset-claimed-on-forum-20-734-timesheet-entries-and-39-staff-accounts/

💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing

🚨🇮🇩 Wibuku dataset containing 200K registered users allegedly leaked on a cybercrime forum
⠀
Wibuku is an Indonesian digital platform and mobile app focused on anime, manga, light novels, and Japanese pop culture content.
⠀
A cybercrime forum actor using the handle L3yn claims to have leaked a dataset containing approximately 200,000 registered Wibuku users and published a sample of the purported records.
⠀
Claimed data includes:
⠀
• User IDs
• Gmail addresses
• Registered account information
⠀
The published sample shows user IDs paired with email addresses, while additional information.
⠀
The breach claim, record count, and full scope of the exposed data have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Malware... don't download unless you want malware.

https://github.com/dead-partaker2244/GTA-6-Social-Club-Bypass-No-Account

‼️ LAPSUS$ Group has a new PGP signed message. Chapter II first victim is set to release in 3 days.

IOC: lapsus[.]ar[.]io

"When we completed our first operations, we demonstrated the triviality of modern enterprise defense systems. To TeamPCP, we send our sincere gratitude: your sacrifice provided us with the exact coverage we needed. We owe you all our gratitude for falling and taking on the acts of our cooperation. Retirement was only a temporary diversion born of pure boredom. Yet, driven by our enduring passion for the craft, we return not out of necessity, but to reclaim our dominance and for the love of the game. Our primary goal today is explicit: to openly challenge the FBI and the federal apparatus, proving once and for all that we operate completely above the law on this network. Corporate violations, corporate extortion and the generation of countless millions of dollars will continue unhindered, without any risk to ourselves, completely free. Prepare your incident response units and alert your federal managers. The clock is active."

LAPSUS$ Group name sale: https://core.metaplex.com/explorer/9HVcBG572WENSB6uTMB2geYQxMVWS1Z6C6fNsbW6oagx