Dark Web Informer - Cyber Threat Intelligence

A forum user posting as ZeroBytes claims to have breached Éducation Nationale, the French national education ministry, and is selling what they describe as a partial database totalling 346,178,591 raw lines across three folders.

A forum user posting as konata_izumi_shell claims to have breached INOCUIDAD, the food safety and sanitary control system operated by the Autonomous Departmental Government of Santa Cruz in Bolivia, and has published the data for free download.

A forum user posting as exfilar is offering what they describe as a live extraction of the production backend behind Snapstartalent.com, a Kenyan recruitment platform, comprising 176,795 database records and 249GB of downloaded files.

A forum user posting as bytetobreach claims to hold databases belonging to RFZO, the Republic Fund for Health Insurance of Serbia, and has posted links to the material across five separate file hosting services.

A forum user posting as exfilar has published what they describe as the full production Realtime Database behind intraverse.io, the Intraverse/Gamifi web3 gambling platform, totalling 16,898,017 database leaves across roughly 518MB of JSON.

A forum user posting as exfilar is offering what they describe as a complete live extraction of the production backend behind flyfly.co.kr, a Korean food-delivery platform, listed at 47.9 million rows across 46.6GB and priced at $60,000 in Monero.

Ransomware Attack Update - August 13th, 2026

A forum user posting as ChimeraZ has published what they describe as the database of Chupin, a French dealer in agricultural equipment, spare parts, and garden machinery, comprising 16GB across 70,974 files.

The group posting as ZeroBytes claims a second intrusion at France's Direction générale des Finances publiques, this time against the professional cadastral data server that holds land and property registry information.

An actor posting as sta6 is selling what they describe as the complete recruitment pipeline of Zro Global, a Latin American fintech, covering every hiring thread processed by its platform up to 8 August 2026.

A seller posting as dreamss is advertising what they describe as the customer database of Branch Furniture, a US direct-to-consumer office furniture company selling to home offices, startups, and businesses.

A forum user posting as kitta has published what they describe as the database of Ramp4u, a Russian-language cybercrime and dark web forum.

A seller posting as RasselKyc is advertising made-to-order cryptocurrency exchange accounts registered under names supplied by the buyer.

A forum user posting as 2019 has published what they describe as the customer database of Waggle, a US pet technology company whose products include a smart camera offering live video, two-way audio, treat dispensing, and real-time alerts.

A forum user posting as NightBroker has published what they describe as the user database of Silvi AI, a Danish service that automates academic literature reviews.

A buyer posting as umbreon is advertising to purchase corporate network access on flat-rate terms, setting out unusually specific selection criteria.

An actor posting as dopePanda claims to have compromised the business permit database of the Bacoor City Government in Cavite, Philippines, releasing what they describe as more than 57,000 records covering permits, owner names, addresses, and phone numbers.

An actor posting as WInQ7wk9sA3a claims to have held root access for 47 days to Baltas Online, a Turkish HR and assessment firm, and exfiltrated a 500GB+ archive covering more than 750 corporate clients.

A threat actor posting as bytetobreach claims to have compromised the Magyar Államkincstár, Hungary's State Treasury, which administers state payments, pensions, family benefits, and EU funding.

A seller posting as Roiese is offering what they describe as full administrative access to the FortiGate firewall and network security environment of Golden Tulip Bahrain, a hotel property in Bahrain.