NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News2 min read

77 GB ISID FTP Client Data Leak

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

77 GB ISID FTP Client Data Leak

Breach Overview
On July 2, 2025, user CLOBELSECTEAM published 77 GB of FTP client data stolen from ISID, a Spanish firm focused on audiovisual processing, facial/object/audio recognition, and data management. ISID supports clients in security/intelligence, media, banking, legal sectors—including the security services of Colombia, Ecuador, Spain and the European Union.

Breached Dataset
Only the FTP client identified as 7783_Sadkek was obtained and publicly released.

Where & How?
The data was exfiltrated from an ISID FTP server. Details on the specific intrusion method haven’t been disclosed. Given the nature of the service, even the FTP client could contain sensitive credentials, configurations, and possibly logs.

Company Breach History
No prior public reports or news of ISID suffering a data breach were found, implying this may be the first documented compromise. This underscores a likely lapse in their internal security controls and monitoring.

Attack Tracker Mentions

  • The X account @H4ckmanac flagged this as a “Data Breach Alert” by CLOBELSECTEAM, confirming the 77 GB FTP client data leak.
  • Hackmanac’s LinkedIn post specified that the exfiltration “an FTP client associated with ISID.”

Actionable Advice

For ISID (and similar tech vendors):

  1. Immediately audit and isolate exposed FTP systems.
  2. Rotate credentials, SSH keys, and connection configurations.
  3. Implement zero‑trust network segmentation and real‑time monitoring.
  4. Consider stronger security posture: disable insecure protocols, enable MFA, encrypt sensitive traffic, and deploy intrusion detection systems.

For Clients & Partners:

  • Assume FTP credentials/configs are compromised—rotate all access tokens and keys.
  • Audit integrations with ISID for suspicious activity.
  • Monitor for unauthorized access or misuse of audiovisual recognition endpoints.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports