OpSec Failures
These cases are based on publicly available court records, official statements, and published reporting. Names and aliases are included only when they have been publicly documented.
Dark Web Informer - Cyber Threat Intelligence
Please support the site operations by clicking ads.
KRYS Group Data Listing Claims 9,537 Records Across Customer and Appointment Files
A poster using the handle "Syrv4x" claims to be sharing a KRYS Group dataset. The post describes KRYS Group as a French optical retail cooperative and hearing-care company operating more than 1,600 points of sale across its brand network.
SFR Customer Data Listing Claims 15,818 Records With Contact and Banking Fields
A poster using the handle "Syrv4x" claims to be sharing an SFR dataset.
Laboratoire LCS Data Offered for Free in 42,495-Row Listing
A poster using the handle "Syrv4x" claims to be sharing a Laboratoire LCS dataset for free.
Actor Offers KEL Group Data for Sale, Claims 1.3 Million People Affected
An actor using the handle "ChimeraZ" is offering what they describe as the KEL Group database for sale.
Forum Post Claims 7,770 Lines of Spareka Appointment Data
A poster using the handle "Syrv4x" claims to be sharing a Spareka appointment dataset for free.
Les Clés de l’Atelier Dataset Allegedly Shared for Free
A poster using the handle "Syrv4x" claims to be sharing a dataset associated with Les Clés de l’Atelier for free.
Saudi Military Hospital Hack Claim Includes Patient and Staff Samples
A poster using the handle "UWAYS", writing on behalf of Uways Qarani, claims to have penetrated systems associated with Prince Sultan Military Medical City (PSMMC), also referred to in the post as Riyadh Military Hospital.
Valdemoro Police Records Allegedly Leaked From EUROCOP
An actor using the handle "IntelShadow" claims to have uploaded a large part of the EUROCOP dataset used by the local police in Valdemoro, Madrid, Spain.
Digit RE Group Call and Contact Data Allegedly Leaked
An actor using the handle "ChimeraZ" claims to have released call-related data associated with Digit RE Group.
Alleged Kaya Leak Includes 1.7 Million Records and Identity Data
An actor using the handle "DaOnlySpark" claims to have breached Kaya and released a 1.14 GB dataset containing 1,697,095 records across 87 collections.
Actor Claims to Leak 6.2 Million Relais Colis Records
An actor using the handle "RandomRussian" claims to have released a dataset associated with Relais Colis, a parcel delivery service.
Alleged ARNTREAL Dataset With 101,015 Users Offered for Sale
An actor using the handle "RedStone" is offering an alleged ARNTREAL dataset for sale, claiming it contains 101,015 users, 81,006 user email addresses and 39,327 user phone numbers.
Alleged Pet Stop Dataset With 1M+ Records Offered for $140
An actor using the handle "Spaniard" claims to have breached Pet Stop and is offering an alleged dataset containing more than one million unique lines for $140, payable in Monero (XMR).
Horizane Santé Breach Claim Includes 8,864 Customer Records
An actor using the handle "Jaded" claims to have breached Horizane Santé and exposed records relating to 8,864 active customers, alongside 12 employee records.
Crypto Wallet Brute-Forcing Service Offered for a 30% Cut
An actor using the handle "MrHuk" is advertising a cryptocurrency wallet-processing and brute-forcing service on an underground forum.
LQDFX Customer Dataset Offered for Sale for $800
An actor using the handle "0x4ziz" is offering a dataset allegedly containing LQDFX customer information on DarkForums for $800, negotiable.
Corium Seed Checker Advertised With Auto-Withdraw and Source Code
A forum actor posting as f15 is advertising Corium Seed Checker, a cryptocurrency wallet-checking toolkit marketed with source code and an auto-withdraw capability.
TRC20 Drainer + AML Project + QR Method Offered as a 3-in-1 Crypto Theft Kit
A forum actor using the handle "honeymanOne" is advertising a private cryptocurrency theft kit combining a TRC20 drainer, a fake AML-check workflow and a QR-based wallet-draining component.
ColisPort API-Scraped Dataset Claim Covers 19,741 Records
A forum actor posting as Quantique has released what they describe as a dataset scraped from ColisPort, a French parcel-shipping service.
A real-time cyber threat intelligence platform that monitors the dark web and clearnet for data breaches, ransomware campaigns, darknet market activity, leaked databases, and active threat actors.