‼️🇨🇴 Hospital Universitario Nacional de Colombia (hun.edu.co), a major Colombian university hospital, has allegedly been breached, with a full database dump (8 DBs, 197 tables) being sold along with confirmed live access to the production server.
⠀
‣ Threat Actor: macaroni
‣ Category: Data Leak / Network Access
‣ Victim: Hospital Universitario Nacional de Colombia
‣ Industry: Healthcare / Education
⠀
The actor claims the data was extracted on May 2, 2026 from a production server that remains running and accessible on the internet. The listing emphasizes an open MySQL port (3306) exposed publicly, presenting an immediate lateral movement opportunity for any buyer looking to pivot into the internal network. Price is set at $1,500 XMR.
⠀
What's in it:
⠀
▪️ 8 databases / 197 tables (full schema + real data)
▪️ REDCap clinical research platform: 639 user accounts, SHA-512 hashes with 100-char salts, TOTP seeds in plaintext, 10K+ patient records, clinical notes, research project files
▪️ Hospital pharmacy system: 22 users with plaintext passwords, 10K drug transactions with prices and suppliers
▪️ Employee directory: 583 staff members with full names, national ID numbers, job titles, personal emails
▪️ WordPress multisite intranet: internal communications, API keys, admin PII, login logs with timestamps
▪️ Server fingerprint: Apache 2.4.17 / PHP 5.6.23 on Windows
▪️ Live proof: open MySQL port 3306, valid SSL cert until October 2026, active phpMyAdmin (IP-restricted)
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations

‼️🇳🇴 Fredrikstad Municipality of Norway (fredrikstad.kommune.no) has allegedly been breached, with an Active Directory user dump leaked containing employee information from the government sector.
⠀
‣ Threat Actor: kaya
‣ Category: Data Leak
‣ Victim: Fredrikstad Municipality
‣ Industry: Government / Public Sector
⠀
The actor claims to have uploaded an active directory dump from the Norwegian municipality, exposing general information about all employees working in the government sector.
⠀
What's in it:
⠀
▪️ Active Directory entries (LDAP / DirectoryEntry)
▪️ User IDs, CN (Common Name), DN (Distinguished Name)
▪️ Employee names
▪️ Organizational unit (OU) information
▪️ Account enabled status
▪️ UPN (User Principal Name) and email addresses
▪️ Department, role, and job titles
▪️ Phone and mobile numbers
▪️ Manager and ManagerDN information
▪️ Street addresses
▪️ SIP information
▪️ hasChildren and isOU flags
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations

‼️🇬🇹 Universidad Da Vinci de Guatemala has allegedly been breached, with a massive student database leaked containing PII and student photos.
⠀
‣ Threat Actor: Dianna
‣ Category: Data Leak
‣ Victim: Universidad Da Vinci de Guatemala
‣ Industry: Education / University
⠀
The actor claims to have exploited a poorly configured WAF security system to extract student data via exposed APIs (one for photos, one for personal information). The leak includes 98,099 JSON files and 16,000 student photos.
⠀
What's in it:
⠀
▪️ 98,099 JSON files containing student records
▪️ 16,000 photos of students
▪️ IDU (student ID)
▪️ Full names (Nombre, Apellidos)
▪️ Identification / CIF numbers
▪️ Civil status (Estado Civil)
▪️ Date of birth (Fecha Nacimiento)
▪️ Place of birth (Lugar Nacimiento)
▪️ Address (Direccion)
▪️ Department, Municipality, Zone
▪️ Cellular and home phone numbers
▪️ Additional phone numbers
▪️ Email addresses (Correo)
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations

This probably doesn't apply to any of you, but this thread on Dread goes into if you have gotten a package seized, received a love letter from the Postal Inspector, different scenarios and what to do.

This relates to buying/selling on Darknet Markets.

Dread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/dd338bf888d14d1cbd6b
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations