Dark Web Informer - Cyber Threat Intelligence

An actor using the handle "d00101" claims to have leaked approximately 6.9 GB of data associated with Bangkok Post, including member data and internal infrastructure material.

An actor using the handle "GoreTerminal" claims to have leaked a Defy Club dataset containing approximately 23,149 user accounts.

An actor using the handle "dmitryy" claims to have released a database called ALUMNOS GBA, described as a structured dataset containing student enrollment information from the Province of Buenos Aires, Argentina, for the 2025 academic year.

An actor using the handle "GoreTerminal" claims to have leaked a Capiter dataset containing approximately 208,206 user accounts. The post describes Capiter as an Egyptian B2B startup founded in Cairo that permanently shut down in 2023.

An actor using the handle "libreboot2016" claims to have published a WhatsApp message dataset associated with INBI School of English, a private conversational English school network in Mexico.

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

An actor using the handle "Syrv4x" claims to be sharing an ACTIL dataset for free. The listing describes ACTIL as a French digital health insurance platform that manages third-party payment arrangements, allowing patients to receive medical care without paying upfront costs.

An actor using the handle "Madrex" is advertising a malware service called Spectator Loader.

An actor using the handle "ChimeraZ" claims to be selling a LOOF dataset. LOOF, the Livre Officiel des Origines Félines, is described in the listing as the French organization responsible for registering pedigree cats and maintaining official feline genealogical records.

An actor using the handle "ChimeraZ" claims to have leaked a user dataset associated with ISEP, a French engineering school specializing in digital technology, computer science, electronics and cybersecurity.

An actor using the handle "ChimeraZ" claims to be selling a partial I-CAD dataset. The listing describes I-CAD as the official French website responsible for the national identification registry of dogs, cats and ferrets.

An actor using the handle "Erich" claims to have breached an unnamed conference-space company with approximately $80 million to $100 million in annual revenue.

An actor using the handle "0xRune" claims to have uploaded approximately 20 GB of Cast AI data.

An actor using the handle "Shenron" claims to have released a dataset associated with APICRYPT Messaging, a secure healthcare messaging system created in 1996 and managed by the APICEM association.

An actor using the handle "WolfBlxck" posted an updated recruitment announcement for Beelzebub ransomware, claiming the malware has been rewritten from scratch with a stronger emphasis on disabling endpoint defenses, suppressing telemetry and making incident response more difficult.

An actor using the handle "Liberland" is advertising a hosting service branded as Libre, offering what it describes as “bulletproof” or abuse-resistant VPS and VDS servers.

Records have been stolen from Southville Primary School in Bristol during a targeted cyberattack, according to Bristol City Council.

The Eclipse leak site lists Taiwan Otsuka Pharmaceutical and claims to hold approximately 832 GB of internal company data.

An actor using the handle "ByteToBreach" claims to have copied 10 databases from Ampath Laboratories out of an environment containing roughly 375 databases.

An actor using the handle "Alduin" claims to be selling a Climb Up customer dataset. The post describes Climb Up as the largest network of indoor climbing gyms in France and says the material concerns customers across 29 locations.