Dark Web Informer - Cyber Threat Intelligence

A former National Crime Agency officer has been ordered to repay more than £1.8 million after stealing Bitcoin seized during an investigation into the Silk Road 2.0 darknet marketplace.

An actor using the handle "888" claims to be selling a dataset associated with Explorest, described in the listing as a U.S.-based travel and photography platform.

A poster using the handle "Syrv4x" claims to be selling a FitnessBoutique dataset. The listing describes FitnessBoutique as a French company operating a European retail and e-commerce business focused on home fitness equipment and sports nutrition.

A poster using the handle "RedStone" claims to be selling a dataset belonging to the Royal Belgian Football Association (RBFA).

A poster using the handle "caustic" is advertising interest in purchasing access to corporate networks. The post says most industries are in scope except government entities and lists the United States, Canada, Australia, United Kingdom, European Union and Latin America as target geographies.

A poster using the handle "Syrv4x" claims to be sharing a Centre-Val de Loire Regional Council dataset. The listing describes the organization as the governing body for the Centre-Val de Loire administrative region in France.

These cases are based on publicly available court records, official statements, and published reporting. Names and aliases are included only when they have been publicly documented.

A poster using the handle "Syrv4x" claims to be sharing a KRYS Group dataset. The post describes KRYS Group as a French optical retail cooperative and hearing-care company operating more than 1,600 points of sale across its brand network.

A poster using the handle "Syrv4x" claims to be sharing an SFR dataset.

A poster using the handle "Syrv4x" claims to be sharing a Laboratoire LCS dataset for free.

An actor using the handle "ChimeraZ" is offering what they describe as the KEL Group database for sale.

A poster using the handle "Syrv4x" claims to be sharing a Spareka appointment dataset for free.

A poster using the handle "Syrv4x" claims to be sharing a dataset associated with Les Clés de l’Atelier for free.

A poster using the handle "UWAYS", writing on behalf of Uways Qarani, claims to have penetrated systems associated with Prince Sultan Military Medical City (PSMMC), also referred to in the post as Riyadh Military Hospital.

An actor using the handle "IntelShadow" claims to have uploaded a large part of the EUROCOP dataset used by the local police in Valdemoro, Madrid, Spain.

An actor using the handle "ChimeraZ" claims to have released call-related data associated with Digit RE Group.

An actor using the handle "DaOnlySpark" claims to have breached Kaya and released a 1.14 GB dataset containing 1,697,095 records across 87 collections.

An actor using the handle "RandomRussian" claims to have released a dataset associated with Relais Colis, a parcel delivery service.

An actor using the handle "RedStone" is offering an alleged ARNTREAL dataset for sale, claiming it contains 101,015 users, 81,006 user email addresses and 39,327 user phone numbers.

An actor using the handle "Spaniard" claims to have breached Pet Stop and is offering an alleged dataset containing more than one million unique lines for $140, payable in Monero (XMR).