Daily Dose of Dark Web Informer - October 27, 2026
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
Dark Web Informer - Cyber Threat Intelligence
Please support the site operations by clicking ads.
ACTIL Dataset Claim Lists 152,187 Records With Patient, Prescription and Reimbursement Data
An actor using the handle "Syrv4x" claims to be sharing an ACTIL dataset for free. The listing describes ACTIL as a French digital health insurance platform that manages third-party payment arrangements, allowing patients to receive medical care without paying upfront costs.
Spectator Loader Advertised as FUD Resident Loader With Anti-Analysis and Evasion Features
An actor using the handle "Madrex" is advertising a malware service called Spectator Loader.
LOOF Data Sale Claim Includes 654K Records and 90,555 Documents in 48 GB Archive
An actor using the handle "ChimeraZ" claims to be selling a LOOF dataset. LOOF, the Livre Officiel des Origines Félines, is described in the listing as the French organization responsible for registering pedigree cats and maintaining official feline genealogical records.
ISEP France User Database Leak Claim Lists 5,088 People Across 5,091 JSON Records
An actor using the handle "ChimeraZ" claims to have leaked a user dataset associated with ISEP, a French engineering school specializing in digital technology, computer science, electronics and cybersecurity.
I-CAD Partial Database Sale Claim Lists 2.95 Million Records Covering 2.9 Million Animals and 50,629 Vets
An actor using the handle "ChimeraZ" claims to be selling a partial I-CAD dataset. The listing describes I-CAD as the official French website responsible for the national identification registry of dogs, cats and ferrets.
Conference-Space Company Breach Claim Says Access Remains Live With 6,027 Users and 115,948 Attachments
An actor using the handle "Erich" claims to have breached an unnamed conference-space company with approximately $80 million to $100 million in annual revenue.
Cast AI Data Leak Claim Includes AWS, GCP and GitLab Backups Across 20 GB Archive
An actor using the handle "0xRune" claims to have uploaded approximately 20 GB of Cast AI data.
APICRYPT Dataset Leak Claim Lists 852,757 Records Across 60,911 Healthcare Users
An actor using the handle "Shenron" claims to have released a dataset associated with APICRYPT Messaging, a secure healthcare messaging system created in 1996 and managed by the APICEM association.
Beelzebub Ransomware Announces Major Rewrite and Recruitment Push for New Operators
An actor using the handle "WolfBlxck" posted an updated recruitment announcement for Beelzebub ransomware, claiming the malware has been rewritten from scratch with a stronger emphasis on disabling endpoint defenses, suppressing telemetry and making incident response more difficult.
No-KYC “Abuse-Resistant” VPS and VDS Hosting With XMR Payments
An actor using the handle "Liberland" is advertising a hosting service branded as Libre, offering what it describes as “bulletproof” or abuse-resistant VPS and VDS servers.
Records Stolen From Bristol Primary School in Targeted Cyberattack
Records have been stolen from Southville Primary School in Bristol during a targeted cyberattack, according to Bristol City Council.
Taiwan Otsuka Pharmaceutical Leak Claim Lists 832 GB of Internal Company Data
The Eclipse leak site lists Taiwan Otsuka Pharmaceutical and claims to hold approximately 832 GB of internal company data.
Ampath Laboratories Data Breach Claim Says 10 Databases Copied, Including 80M+ Admission Records
An actor using the handle "ByteToBreach" claims to have copied 10 databases from Ampath Laboratories out of an environment containing roughly 375 databases.
Climb Up Customer Dataset Offered for Sale With 151,000 Records Across 29 French Gyms
An actor using the handle "Alduin" claims to be selling a Climb Up customer dataset. The post describes Climb Up as the largest network of indoor climbing gyms in France and says the material concerns customers across 29 locations.
KFC Venezuela Dataset Claim Lists 1.54 Million JSON Records in 17.5 GB Archive
An actor using the handle "malconguerra2" claims to be sharing a KFC Venezuela dataset containing confidential information.
German Municipality Targeted in Suspected AI-Driven Zero-Day Attack
The German municipality of Tangerhütte was targeted in a cyberattack that its software provider believes was conducted with artificial intelligence.
Ivanti Patches Actively Exploited Connect Secure Zero-Day and Critical Credential-Leak Flaws
Ivanti has released security updates for an actively exploited Connect Secure zero-day and six additional vulnerabilities affecting Neurons Patch for Intune and Xtraction.
IAD France Dataset Leak Claim Includes 112,780 Property Records and 8,592 Agent Profiles
An actor using the handle "Feel" claims to have leaked data associated with IAD France, a French real estate network supporting property buying, selling and rental activity.
Moveciti Administrator Access and Exported Database Offered for Sale With 1.18 Million Bus-App Documents
An actor using the handle "DaOnlySpark" claims to be selling administrator access to Moveciti's database along with a database export dated October 9, 2026.
A real-time cyber threat intelligence platform that monitors the dark web and clearnet for data breaches, ransomware campaigns, darknet market activity, leaked databases, and active threat actors.