Skip to content Dark Web Informer - Cyber Threat Intelligence

Alleged sale of data from the Technical and Vocational Training Corporation of Saudi Arabia

💡 Subscribe to DarkWebInformer.com for Unmatched Cyber Threat Intelligence 💡

Why Subscribe? Let me do the work and save you time.

Stay ahead of cyber threats and safeguard your digital assets while enhancing your cybersecurity awareness with just some of these exclusive subscriber-only features:

  • 📜
    Real-Time Threat Feed: Stay updated with 100–200 daily alerts covering ransomware disclosures, breaches, and leaks—now featuring unredacted screenshots starting March 26.
  • 📡
    Detailed Threat Posts: Stay updated on breaches, leaks, ransomware, DDoS attacks, and more.
  • 📤
    On-Demand Data Export: Export all 14,000+ alerts to JSON, CSV, or XML at any time for deeper analysis.
  • 🖼️
    Unfiltered Data Visibility: Instantly access high-resolution, watermark-free screenshots of leaked information. Unredacted details allow for fast, accurate threat assessments.
  • 🔗
    Direct Claim URLs: Instantly access claims with direct links for fast verification.
Subscribe Now Pay with Crypto

⚠ Disclaimer
This report includes actual screenshots and/or text containing unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.


📌 Overview
A threat actor operating under the alias NO8LO has allegedly listed a database for sale on DarkForums containing personal data of over 338,000 Saudi citizens affiliated with the Technical and Vocational Training Corporation (TVTC, tvtc.gov.sa). The leaked data is reportedly in CSV format and includes plaintext passwords, national ID numbers, contact information, and detailed personal identifiers.

The actor claims the data was obtained directly from TVTC systems and is untouched. It is being marketed for phishing, identity exploitation, and reconnaissance purposes. Multiple institutional categories are affected, including technical colleges, industrial institutes, and prison training centers.


🔑 Key Details

AttributeInformation
📅 Date2025-05-03, 11:19:42 AM
🕵️‍♂️ Threat ActorNO8LO
🌎 CountrySaudi Arabia 🇸🇦
🏭 IndustryEducation
🏢 OrganizationTechnical and Vocational Training Corporation
🌐 Victim Sitetvtc.gov.sa
📜 CategoryData Breach
🔥 SeverityMedium

Subscriber-only content…

This post is for subscribers on the Plus and Pro tiers

Subscribe

Already have an account? Sign In

Latest