Data Breach Summary
A significant data breach has impacted Hacoo, a growing online shopping app often compared to a mix of Pandabuy and Shein due to its focus on counterfeit goods. On June 13, 2025, a leak appeared on the dark web forum darkforums.st, posted by user Cargo, revealing internal company communications and sensitive customer information.

Hacoo’s platform aggregates various sellers across categories like fashion, electronics, and home goods. While offering a convenient shopping experience, the app is known for enabling the purchase of replica items from brands like Adidas, Nike, and New Balance. This business model has fueled its rise—despite ethical and legal concerns over product authenticity.

The leaked documents are said to include full invoices with personal information, such as:

• Full names

• Home addresses

• Phone numbers

• Bank account details

• Internal company data

The post hints that more information will be released soon, suggesting this is only the beginning.

Where and How?
The data was posted on darkforums.st, a dark web marketplace, as part of an initial release by the user Cargo. The breach appears to have originated from unauthorized access to the company’s internal email system, allowing access to internal files and customer records.

Main Affected Countries:

1. Spain

2. France

3. Germany

4. United Kingdom

5. Italy

Company Data Breach History
There are no previous public reports or media coverage indicating that Hacoo has suffered prior data breaches. This seems to be the first known incident involving exposed internal data and user information.

Further Action
This exposure represents a serious privacy concern for users and reputational damage for the company. Hacoo should immediately review its internal security protocols and notify affected individuals where applicable. Transparent communication and strong security updates are crucial to preventing future incidents.

Recommendations for Users

• Change your account passwords immediately

• Enable two-factor authentication

• Monitor bank activity for suspicious charges

• Be cautious of phishing emails or suspicious messages

• Use a password manager to ensure unique credentials across sites

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.