Leaks, dumps and stolen databases we observe on dark web forums, markets and Telegram channels.
Data Breach News
In May 2026, a threat actor on DarkForums claimed to have leaked a database allegedly linked to Belambra.fr, a French holiday village and leisure club operator offering all-inclusive stays for families, couples, and groups.
Data Breach News
A dataset allegedly linked to the Bono Juana Azurduy program, managed by the Ministry of Health and Sports of Bolivia, has been shared online by a user known as Konata Izumi Shell in May 2026.
Data Breach News
A database associated with reservations.mexitravels.com has been leaked online. The dataset, dated February 27, 2026, is reportedly in SQL format and contains approximately 1,983,503 records. The breach was shared on a dark web forum by a threat actor known as “Tanaka.”
Data Breach News
In March 2026, CFGI Management (cfgi.com) was reportedly affected by a significant data breach. The exposed dataset allegedly contains over 800,000 records, including personally identifiable information (PII), along with more than 40,000 internal financial and corporate documents.
Data Breach News
In February 2026, the ransomware group Everest claimed responsibility for a cyberattack targeting Stellium (stellium.com), a consulting firm specializing in supply chain and SAP-based business optimization services.
Data Breach News
In early February 2026, the ransomware and extortion collective Everest Group publicly claimed it had accessed and leaked approximately 36 GB of data from Iron Mountain Inc., a U.S.–based enterprise information management and data storage company.
Data Breach News
Data Breach OverviewIn February 2026, a massive 65GB database allegedly belonging to GIBSIN Engineers Ltd., a Taiwanese engineering consultancy, was leaked by the Everest Group.
Data Breach News
In January 2026, Zebra Technologies — the U.S.‑based multinational technology company with approximately $5.3 billion in annual revenue — experienced a significant data breach.
Data Breach News
In January 2026, Morgan Records Management (morganrecordsmanagement.com), a U.S.-based records and medical data management company, suffered a significant data breach.
Data Breach News
A full SQL database belonging to the municipal ICMS/DIPAM tax declaration portal of São Vicente, São Paulo, has been leaked online. The breach occurred on January 8, 2026, and was carried out by the threat actor @Solonik. The exposed system is a Public Finance Administration Platform.
Data Breach News
Data Breach OverviewIn December 2025, Svenska Kraftnät (svk.se), Sweden’s national electricity transmission system operator, suffered a major data breach allegedly carried out by the Everest ransomware group.
Data Breach News
A database containing personal information for more than 535,000 users of APOIA.se was allegedly posted on the dark web in December 2025 by a forum member using the name Real. The leaked data reportedly includes user identifiers, full names, email addresses, and other associated personal details.
