NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News1 min read

21.5M‑Revenue Chinese Builder Breached by @NetworkBrokers

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

21.5M‑Revenue Chinese Builder Breached by @NetworkBrokers

Data Breach Summary

A data breach has been reported targeting 10design.co, a Chinese architecture and construction firm with an estimated $21.5 million in annual revenue. The breach was carried out by the threat actor @NetworkBrokers, who leaked a SQL database dump containing over 100,000 rows of sensitive information.

The compromised data includes:

  • Internal SQL source code
  • Client records
  • User information
  • Additional internal content

This leak was shared on darkforums.st in September 2025. A partial sample shows SQL structure and table data, confirming the legitimacy of the breach.

Where and How?

The dump was posted on a well-known underground forum, where the attackers shared full database exports — including critical internal code and client/user datasets. SQL exports such as these are often used by attackers to reverse-engineer application logic, gain deeper access, or sell internal codebases on private marketplaces.

Company Data Breach History

There are no verified past breaches publicly reported for 10design.co, making this a notable first incident. However, a Dark Web monitoring account has posted an alert referencing the same breach, reinforcing the claim.

Recommendations for Protection

Users and clients affected or affiliated with the firm should take precautionary measures:

  • Change account credentials linked to this firm
  • Enable 2FA wherever possible
  • Monitor accounts for unusual activity
  • Avoid reusing passwords across services
  • Be cautious of phishing attempts referencing this breach

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports