Dark Web Informer

Daily Threat
Intelligence Digest

Real-time breach tracking, ransomware activity, and dark-web monitoring.

23 SIGNALS TODAY 3 REPORTS REAL-TIME
Data Access
🔑
API Access Available

High-volume threat intelligence, ransomware data, IOC exports, and comprehensive feed access.

Explore API →
🔁 Follow across all official platforms /socials ↗
Reach
🔥
Advertising Opportunities

Reach a highly engaged audience. View details →

90.9k
Unique Visitors
170.6k
Pageviews

LAST 30 DAYS · AS OF 2026-06-04 · NEXT UPDATE 07-04

Premium
🔒
Unlock Premium Intelligence

Real-time breach tracking, expert analysis, high-resolution evidence, unredacted feeds, and 5,100+ blog posts. View all plans and features on the pricing page.

View Plans & Subscribe →
Classification Key
📰Law Enforcement - LEA updates, investigations
⚠️Dark Web Notices - forums, markets, announcements
❗️Urgent Threats - breaches, ransomware, vulnerabilities
💡Insights & Tools - guides, OSINT, learning resources
█ Today's Intelligence
23 ENTRIES
Threat Intelligence · Reports
REPORT❗️Threat Actor Claims to Sell a Carvivo Automotive Lead Database Affecting Millions in France
REPORT❗️IEEA Campeche Data Breach: Hackers Claim to Leak Staff and Student Records
REPORT❗️SSRF to Root: Unauthenticated File-Write Flaw in Cisco Unified CM (CVE-2026-20230)
X / Twitter Updates
NOTICE❗️A threat actor known as DozerMx is distributing a dataset allegedly scraped from the Bogotá Secretary of Education (SED) in Colombia.
NOTICE❗️A threat actor known as JeffData is selling a dataset allegedly scraped from HungerStation, a major food delivery platform in Saudi Arabia.
NOTICE❗️A threat actor known as Japoy is selling a dataset allegedly scraped from the Environmental Management Bureau of the Philippines, a government agency.
NOTICE❗️A threat actor known as jordanbelfortwolf is selling access to a bot offering banking leads allegedly tied to customers of major Spanish banks, including CaixaBank, Banco Santander, BBVA, Banco Sabadell, ING, Bankinter, and others.
NOTICE❗️A threat actor known as S646 is selling a dataset allegedly scraped from Pôle Emploi, the French government employment agency.
NOTICE❗️A threat actor known as neat is selling what they claim is the entire population dataset of an unnamed European country, with the specific country said to be revealed only after proof of funds.
NOTICE❗️A threat actor known as Black0ut_Exi is distributing a dataset allegedly scraped from the Human Resources department of the government of Salta, a province in Argentina.
UPDATE💡Wanted to introduce the Scan screenshot feature that is coming to Threat Feed 3.0 later this month...
NOTICE❗️A threat actor known as MrDarkRoot is selling a dataset allegedly containing citizen records from the Republic of Kenya, with a separate folder said to exist for each individual.
NOTICE❗️A threat actor known as nearlevrai is selling two datasets allegedly tied to L'Assurance Maladie, the French national health insurance system, and Colis Privé, a French parcel delivery company.
NOTICE❗️A threat actor known as Z3usOlymp, posting under the Olympus_Group banner, is distributing a dataset allegedly scraped from Mexico's Secretaría de Salud (Ministry of Health).
NOTICE❗️Baker Distributing Company has had a data leak by ShinyHunters
NOTICE❗️A threat actor known as vvvv, posting under the INF GRUPA banner, is distributing a dataset allegedly scraped from http://Vladars.rs, the official portal of the Government of Republika Srpska in Bosnia and Herzegovina.
NOTICE❗️A threat actor known as 2019 is distributing a dataset allegedly from R.I.C. Publications, an Australian educational publishing company that produces teaching resources and student workbooks for schools.
NOTICE❗️A threat actor known as webscn is distributing a dataset allegedly from the International Judo Federation (IJF), the global governing body for the sport of judo.
NOTICE⚠️Dark Matter Market is currently undergoing payment system maintenance. There is currently no indication of an exit, but stay aware.
NOTICE❗️A threat actor known as misere is distributing a dataset allegedly tied to http://Purvapor.fr/ch, an online retailer operating in France and Switzerland, reportedly obtained via a webshell on a linked website.
UPDATE💡Brave markets itself as an ad blocker.
NOTICE❗️A threat actor known as Masterbyte is selling a dataset allegedly tied to Hyundai Steel Mexico, the Mexican subsidiary of Korea's Hyundai Steel, based in Pesquería, Nuevo León.
NOTICE❗️A threat actor known as Darkode1 is advertising a crypto-draining service via cryptdrainer[.]com, marketing malicious tools designed to empty victims' cryptocurrency wallets.