Dark Web Informer - Cyber Threat Intelligence

A forum user posting as NikolaT has published what they describe as the database of Groupe Bernard, a French group working in grain, animal nutrition and agriculture, giving a size of 22.25 GB across 330,563 files.

A forum user posting as Lagui1337 is selling what they describe as the user database of YouFid, a French customer loyalty platform used by restaurant and retail merchants.

A forum user posting as xpl0itrs is selling what they describe as 6.1 TB of documents taken from Gruppo Spaggiari Parma, a long established Italian supplier of school administration software.

A forum user posting as DumpSecNew is selling what they describe as data drawn from Portail Calypsso, an access portal used to query French national police systems.

A forum user posting as seraphims is selling what they describe as the database of bitbybit.studio, an AI commerce platform that turns customer conversations on WhatsApp and Instagram into orders, support, and checkouts.

A forum user posting as misere is selling what they describe as the customer database of bureau-vallee.fr, a French office supplies chain, listing 13,725,669 total records reducing to 4,819,927 unique.

A forum user posting as misere is selling what they describe as the database of beautysuccess.fr, a French beauty and cosmetics retailer, listing 10,279,819 total records reducing to 5,169,727 unique.

A forum user posting as Knox is selling what they describe as voter registration data from Iraq's Independent High Electoral Commission, claiming records on 31 million Iraqis including 28 million phone numbers, with the intrusion dated to August 2026.

A newly registered user posting as UNC2030 is offering what they describe as a complete dump of speero.net, a Riyadh based marketplace for car parts and maintenance services, comprising 83 tables and 11GB of CSV data.

A forum user posting as ChimeraZ is selling what they describe as the database of allobebe.fr, a French retailer of baby products and childcare equipment, covering 2,175,216 records across 1,136,058 people and spanning orders placed from 2006 through 2026.

A forum user posting as ChimeraZ is selling what they describe as the database of madeinbebe.com, a French retailer of products for babies and children, comprising 1,359,546 invoice lines covering 960,106 people in 1.45GB of JSON.

A forum user posting as ChimeraZ has published what they describe as the database of bergerat-rent.com, a French company renting construction, industrial and handling equipment, comprising 43GB across 132,433 files.

A forum user posting as Alduin claims to have scraped the CRM behind frenchinnov.fr, a French platform that centralises restaurant operations including point of sale, stock, staff planning, loyalty and delivery platform integration.

A forum user posting as Satanic is selling what they describe as the full database of Wrappiness.co, a United States retailer of personalised and custom gifts including wood signs, ornaments and keychains.

A member posting as Cookiegen131 is recruiting a developer to build a Telegram based identity verification system for a stated Mexican telecom project.

A newly registered user posting as danbalan is advertising Checkermax, a subscription service that scans Solana wallet addresses for holdings not visible in a standard balance view.

Healthcare technology company CareCloud has confirmed that hackers stole personal information and medical records belonging to more than 3.75 million people during a cyberattack earlier this year.

A forum user posting as kingloki is offering what they describe as a complete order export from coincustody.io, an Argentine reseller of Trezor and Ledger hardware wallets, covering 212 orders placed between May 2025 and August 2026.

A forum user posting as Knox is offering what they describe as backup data taken from the Chinese PLA General Hospital in Beijing, commonly known as 301 Hospital.

A forum user posting as Satanic has published what they describe as 662 datasets totalling 33GB, exported from Stripe merchant accounts using 1,033 compromised API keys.