Dark Web Informer - Cyber Threat Intelligence

An actor posting as sta6 is selling what they describe as the complete recruitment pipeline of Zro Global, a Latin American fintech, covering every hiring thread processed by its platform up to 8 August 2026.

A seller posting as dreamss is advertising what they describe as the customer database of Branch Furniture, a US direct-to-consumer office furniture company selling to home offices, startups, and businesses.

A forum user posting as kitta has published what they describe as the database of Ramp4u, a Russian-language cybercrime and dark web forum.

A seller posting as RasselKyc is advertising made-to-order cryptocurrency exchange accounts registered under names supplied by the buyer.

A forum user posting as 2019 has published what they describe as the customer database of Waggle, a US pet technology company whose products include a smart camera offering live video, two-way audio, treat dispensing, and real-time alerts.

A forum user posting as NightBroker has published what they describe as the user database of Silvi AI, a Danish service that automates academic literature reviews.

A buyer posting as umbreon is advertising to purchase corporate network access on flat-rate terms, setting out unusually specific selection criteria.

An actor posting as dopePanda claims to have compromised the business permit database of the Bacoor City Government in Cavite, Philippines, releasing what they describe as more than 57,000 records covering permits, owner names, addresses, and phone numbers.

An actor posting as WInQ7wk9sA3a claims to have held root access for 47 days to Baltas Online, a Turkish HR and assessment firm, and exfiltrated a 500GB+ archive covering more than 750 corporate clients.

A threat actor posting as bytetobreach claims to have compromised the Magyar Államkincstár, Hungary's State Treasury, which administers state payments, pensions, family benefits, and EU funding.

A seller posting as Roiese is offering what they describe as full administrative access to the FortiGate firewall and network security environment of Golden Tulip Bahrain, a hotel property in Bahrain.

A forum user posting as Sub21 has published what they describe as the database of ExpoEmpleo, a Uruguayan employment platform, covering registrations since around 2015.

A seller posting as Resolute, claiming to have acted alongside a group using the Lapsus$ name, is advertising data from a complete compromise of Mercor, the US platform that recruits domain experts to produce training data for AI laboratories.

A forum user posting as cozypandas has published what they describe as the full customer database of IPRO, an eDiscovery platform used by law firms, corporations, and government agencies to manage data for litigation.

Broadcom has released emergency security updates for five vulnerabilities affecting VMware vCenter, ESX and ESXi, Workstation, Fusion, Cloud Foundation, vSphere Foundation, and several VMware Telco products.

A forum user posting as 0xSec has published what they describe as the database of Lire Demain, the schools and institutions network of the French children's publisher Auzou, which supplies books, kamishibai theatres, and educational materials to schools, early years settings, and local authorities.

A seller posting as weykofa is advertising what they describe as the database of Planity, the French online booking platform used by hair salons, beauty businesses, and spas to manage appointments and customer records.

A seller posting as 666op is advertising what they describe as a customer database from Shopee, the e-commerce marketplace operated by Sea Limited.

A forum user posting as ChimeraZ has published what they describe as the database of Allo.Solar, a French e-commerce platform selling photovoltaic and renewable energy equipment.

A forum user posting as 888 has published what they describe as a breach of Beny.com, operated by BENY New Energy, a manufacturer of solar photovoltaic safety equipment, microinverters, battery storage systems, and EV charging hardware.