NewAI pentesting that proves every finding
INSECUREWEB

Data breach tracker

Leaks, dumps and stolen databases we observe on dark web forums, markets and Telegram channels, newest first.

Reports published
2,200
Latest report
September 18, 2026
Records you can search
19B+

    These reports reflect observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

    1. Netmaster.tg Data Breach Exposes User Credentials

      In late 2024, Netmaster.tg, a Togolese internet service provider, suffered a significant data breach. A threat actor allegedly exfiltrated and began selling sensitive user data on the dark web, including full names, email addresses, hashed passwords, IP addresses, and login activity logs.

    2. 24,063 Iranian Doctor Profiles Scraped from Nobat.ir

      A dataset containing detailed public profiles of over 24,000 doctors in Iran has been scraped from the appointment booking platform Nobat.ir.

    3. Over 3,300 User Records Leaked from Marathon.in Database

      On March 24, 2025, cybersecurity monitors discovered a significant data breach impacting Marathon.in, a prominent Indian real estate and property management platform.

    4. Estonian Logistics Platform tymap.app Suffers Alleged Data Breach

      On May 29, 2025, cybersecurity sources reported an alleged data breach affecting tymap.app, an Estonian logistics tracking platform. The breach reportedly exposed sensitive user information, including email addresses, full names, and hashed passwords.

    5. Sensitive Government Data from San Andrés Cholula

      On May 27, 2025, a significant data breach was identified involving the San Andrés Cholula municipal government in Puebla, Mexico. An individual using the alias “aero” shared over 20 SQL database files on the dark web forum darkforums.st.

    6. Bangladesh Ministry Database Leak

      On May 15, 2025, a SQL database from the Ministry of Road Transport and Bridges of Bangladesh was leaked on the dark web forum darkforums.st by user “wht”. The data appears to originate from the government portal eservices.rthd.gov.bd and contains official legal and administrative records.

    7. San Juan Internal Database Dump Leaked

      An internal database from Obras Sanitarias Sociedad del Estado San Juan (Argentina) has been leaked on the dark web forum darkforums.st by the user “aero”. The dump includes 30+ SQL files, each representing individual database tables, reportedly exported using phpMyAdmin. Where and How?

    8. Universidad Santiago de Cali Data Leak

      A significant breach has surfaced on the dark web forum darkforums.st, where the user “aero” leaked over 127 CSV/XLSX files containing sensitive institutional data from Universidad Santiago de Cali (ID: 1829).

    9. 26M+ Venezuelan Citizen Records Leaked

      On May 26, 2025, a significant data breach involving over 26 million records of Venezuelan citizens was announced on the dark web forum DarkForums.st by a hacker using the alias Cypher404x.

    10. 3.9M Records Leaked from EsSalud Peru Database

      On May 26, 2025, cybersecurity monitors detected a major data leak involving the Peruvian public healthcare provider EsSalud. A total of 3,999,149 records were leaked and made available on the dark web forum DarkForums.st by a user operating under the alias InjectionInferno2.

    11. 16K Crewfare Emails Leaked on DarkForum.st

      On May 22, 2025, a significant data breach involving Crewfare Inc., a U.S.-based travel-tech company, was identified on the cybercrime forum DarkForum.st. The breach, disclosed by the user ‘OneERA,’ includes a dataset containing approximately 16,000 internal emails.

    12. Assifact User Credentials Leaked on DarkForums.st

      A data leak affecting Assifact — the Italian Association for Factoring — was identified on May 23, 2025, after a post by the user OneERA on the dark web forum darkforums.st. The breach exposed a user credential database containing email addresses and bcrypt-hashed passwords.