NewAI pentesting that proves every finding
INSECUREWEB

Data breach tracker

Leaks, dumps and stolen databases we observe on dark web forums, markets and Telegram channels, newest first.

Reports published
2,200
Latest report
September 18, 2026
Records you can search
19B+

    These reports reflect observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

    1. Belambra.fr Customer Data Leak Exposes 402K Records

      In May 2026, a threat actor on DarkForums claimed to have leaked a database allegedly linked to Belambra.fr, a French holiday village and leisure club operator offering all-inclusive stays for families, couples, and groups.

    2. Bono Juana Azurduy Beneficiary Data Exposure

      A dataset allegedly linked to the Bono Juana Azurduy program, managed by the Ministry of Health and Sports of Bolivia, has been shared online by a user known as Konata Izumi Shell in May 2026.

    3. MexiTravels Reservations Database Leak Exposes User Data

      A database associated with reservations.mexitravels.com has been leaked online. The dataset, dated February 27, 2026, is reportedly in SQL format and contains approximately 1,983,503 records. The breach was shared on a dark web forum by a threat actor known as “Tanaka.”

    4. CFGI Management Data Breach Exposes 800K Records

      In March 2026, CFGI Management (cfgi.com) was reportedly affected by a significant data breach. The exposed dataset allegedly contains over 800,000 records, including personally identifiable information (PII), along with more than 40,000 internal financial and corporate documents.

    5. Stellium Data Breach: 360GB Database Claimed by Everest

      In February 2026, the ransomware group Everest claimed responsibility for a cyberattack targeting Stellium (stellium.com), a consulting firm specializing in supply chain and SAP-based business optimization services.

    6. Iron Mountain 36GB Data Leak of Client Documents by Everest Group

      In early February 2026, the ransomware and extortion collective Everest Group publicly claimed it had accessed and leaked approximately 36 GB of data from Iron Mountain Inc., a U.S.–based enterprise information management and data storage company.

    7. 65GB of Engineering Data Leaked from GIBSIN (Taiwan)

      Data Breach OverviewIn February 2026, a massive 65GB database allegedly belonging to GIBSIN Engineers Ltd., a Taiwanese engineering consultancy, was leaked by the Everest Group.

    8. Zebra Technologies Source Code Breach Exposes Internal Files

      In January 2026, Zebra Technologies — the U.S.‑based multinational technology company with approximately $5.3 billion in annual revenue — experienced a significant data breach.

    9. 52 GB Data Leak at Morgan Records Management by Everest Group

      In January 2026, Morgan Records Management (morganrecordsmanagement.com), a U.S.-based records and medical data management company, suffered a significant data breach.

    10. São Vicente Tax Portal Suffers Full SQL Database Leak

      A full SQL database belonging to the municipal ICMS/DIPAM tax declaration portal of São Vicente, São Paulo, has been leaked online. The breach occurred on January 8, 2026, and was carried out by the threat actor @Solonik. The exposed system is a Public Finance Administration Platform.

    11. svk.se (Svenska Kraftnät) 206 GB Data Leak

      Data Breach OverviewIn December 2025, Svenska Kraftnät (svk.se), Sweden’s national electricity transmission system operator, suffered a major data breach allegedly carried out by the Everest ransomware group.

    12. APOIA.se User Data Leak — 535K Records Exposed

      A database containing personal information for more than 535,000 users of APOIA.se was allegedly posted on the dark web in December 2025 by a forum member using the name Real. The leaked data reportedly includes user identifiers, full names, email addresses, and other associated personal details.