> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Capiter Data Leak Claim Exposes 208,206 User Accounts and Phone Numbers
- URL: https://darkwebinformer.com/capiter-data-leak-claim-exposes-208-206-user-accounts-and-phone-numbers/
- Published: 2026-10-28T15:47:24.000Z
- Updated: 2026-10-28T15:47:24.000Z
- Author: Dark Web Informer
- Tags: Leaks

Data Exposure Report ![Egypt flag](https://flagcdn.com/w20/eg.png)Egypt B2B Commerce User & Phone Data Free Leak Unverified 

## Capiter Data Leak Claim Exposes 208,206 User Accounts and Phone Numbers

Claimed accounts208,206

Phone numbers208K+

Uncompressed size150 MB

Compressed size34 MB

Severity HIGH 

### Overview

An actor using the handle **"GoreTerminal"** claims to have leaked a **Capiter dataset** containing approximately **208,206 user accounts**. The post describes Capiter as an Egyptian B2B startup founded in Cairo that permanently shut down in 2023.

The actor states the breach occurred on **October 28, 2026 at 10:11 AM EDT** and characterizes the release as a leak rather than a ransom event. The archive is described as **JSON Lines**, with an uncompressed file named **CAPITER\_UNIQUE.JSONL** at **150 MB** and a compressed archive at **34 MB**. The visible schema includes phone numbers, international phone numbers, customer IDs, country, carrier, city, district, area, order and product metadata, payment type, inventory data and profile timestamps. **The dataset, its source, the stated counts and current availability have not been independently verified.**

### Post details

OrganizationCapiter

Country![Egypt flag](https://flagcdn.com/w20/eg.png)Egypt

SectorB2B commerce / distribution technology

Actor"GoreTerminal"

Claimed accountsApproximately 208,206

FormatJSON Lines

Archive sizes150 MB raw / 34 MB compressed

Claimed breach timeOct 28, 2026 at 10:11 AM EDT

### What the post claims

- Approximately 208,206 user accounts
- 208K+ phone numbers
- JSON Lines format
- 150 MB uncompressed file
- 34 MB compressed archive
- Phone and international-phone fields included
- Customer IDs included
- Country and carrier fields included
- City, district and area fields included
- Order IDs and order-position fields included
- Order-status fields included
- Product IDs, ranks and categories included
- Inventory-related fields included
- Payment-type fields included
- Offer and retry-count fields included
- Profile-created timestamps included
- Sample records displayed
- Free download advertised

The sample shown in the source material contains structured customer and transaction-related records. Individual phone numbers, customer identifiers and other personal values visible in the sample are not transcribed in this report.

Sponsored

[ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

### Screenshots

[ Screenshot 1Source screenshot ![Capiter data-leak listing showing the claimed breach time, approximately 208,206 user accounts, file sizes and schema fields](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/capiter_egypt.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/capiter%5Fegypt.png) [ Screenshot 2Source screenshot ![Continuation of the Capiter data-leak listing showing sample JSON Lines records and a free-download section](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/capiter_egypt_2.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/capiter%5Fegypt%5F2.png) 

The supplied captures show the Capiter leak claim, the stated breach time, user-account and phone-number scope, JSONL archive sizes, schema fields, sample records and a free-download section. Direct download access is not reproduced here.

### IOCs & identifiers

Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the breach claim.

| Type               | Identifier   | Source          |
| ------------------ | ------------ | --------------- |
| Actor handle       | GoreTerminal | Screenshots 1–2 |
| Named organization | Capiter      | Screenshots 1–2 |

No organization domain, malware hash, Tox ID, Session ID, Telegram handle or attacker-controlled IP address is visible in the supplied screenshots. Personal identifiers shown in the sample are not included in this table.

### Mapped techniques

**Claimed** identifies behavior explicitly described by the actor. **Inferred** identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.

- Collection [T1213.006](https://attack.mitre.org/techniques/T1213/006/) [Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/) Inferred The listing presents a structured JSONL dataset containing customer, phone, order and product-related fields. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Capiter systems.

### Potential impact

If authentic, the claimed dataset could expose **mobile phone numbers, customer identifiers, location information and transaction-related metadata** for more than 200,000 accounts. The combination could support targeted phishing, SMS abuse, impersonation, profiling or other customer-focused social engineering.

### Status Unverified

Dark Web Informer has **not independently verified** the dataset's authenticity, source, completeness, 208,206-account count, archive sizes, sample contents or the actor's claimed October 28 breach time. The supplied screenshots document the listing and visible sample records, not independent confirmation of the underlying data.

Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=capiter-data-leak-2026-10-28&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=capiter-data-leak-2026-10-28&utm%5Fcontent=pricing-button) 

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=capiter-data-leak-2026-10-28&utm%5Fcontent=footer)