Incident Overview

A threat actor operating under the handle "lulzintel" claims that Almaex (almaex.net), an Iranian cryptocurrency exchange platform, suffered a data breach in January 2026. According to the post, the breach exposed over 50,000 user records. The threat actor describes Almaex as a platform providing easy buying and selling of digital currency services for cryptocurrencies. Sample data has been provided demonstrating the structure and types of information allegedly contained in the database.