Massive Leak of 250K U.S. Citizens’ Personal and Banking Data

Data Breach Summary

Overview of the Data Breach

A massive trove of sensitive information — affecting roughly 250,000 U.S. individuals — has surfaced on the dark web forum darkforum.st as of May 21, 2025. The dataset includes critical identity and financial data such as Social Security Numbers (SSNs), driver’s license details, banking credentials, and full personal profiles. The leak was posted by a user known as “namolesa”, who stated that the data was originally bought from a seller on Telegram but ultimately deemed it “not useful” for their purposes.

---

Details of the Breach

The data, now being circulated on a well-known dark web marketplace, contains:

• Full names (first and last)
• Complete addresses, including city, state, and ZIP code
• Email addresses and dates of birth
• Social Security Numbers (SSNs)
• Driver’s license numbers and issuing states
• Phone and cell numbers
• Bank name, IBAN, account numbers, and requested loan amounts
• Country of residence

Originally acquired through a Telegram transaction, the data was later uploaded to darkforum.st, making it easily accessible to cybercriminals. The presence of such comprehensive information significantly raises the risk of identity theft, fraud, and other malicious activity.

Company’s Data Breach History

At this time, no prior breaches connected to darkforum.st or this specific dataset have been publicly documented. However, the platform’s involvement in distributing stolen data underscores ongoing cybersecurity challenges and the ease with which sensitive information can be bought and sold online.

Recommendations for Personal Data Protection

How Users Can Protect Their Information
To safeguard personal information and accounts, users should consider the following steps:

• Change Passwords Regularly: Use strong, unique passwords combining letters, numbers, and symbols.
• Enable Two-Factor Authentication (2FA): Whenever possible, activate 2FA to add an extra layer of security to accounts.
• Use Unique Passwords for Each Account: Avoid reusing passwords across different platforms to prevent multiple account compromises.
• Be Cautious of Phishing Attempts: Stay vigilant against suspicious emails or messages that may contain malicious links or solicit personal information.
• Monitor Accounts for Unusual Activity: Regularly review account statements and activities to detect and respond promptly to unauthorized actions.

By adopting these practices, users can enhance their personal data security and reduce the risk of unauthorized access to their information.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.