> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Defy Club Data Leak Claim Exposes 23,149 User Accounts With 23K+ Phone Numbers and 9K+ Emails - URL: https://darkwebinformer.com/defy-club-data-leak-claim-exposes-23-149-user-accounts-with-23k-phone-numbers-and-9k-emails/ - Published: 2026-10-30T17:50:15.000Z - Updated: 2026-10-30T17:50:15.000Z - Author: Dark Web Informer - Tags: Leaks Data Exposure Report ![India flag](https://flagcdn.com/w20/in.png)India Social Crypto Platform User Contact Data Free Leak Unverified ## Defy Club Data Leak Claim Exposes 23,149 User Accounts With 23K+ Phone Numbers and 9K+ Emails Claimed accounts23,149 Phone numbers23K+ Email addresses9K+ Compressed size805 KB SeverityHIGH ### Overview An actor using the handle **"GoreTerminal"** claims to have leaked a **Defy Club dataset** containing approximately **23,149 user accounts**. The post describes DEFY.club as an India-based social crypto platform that lets users share and track portfolios, follow other investors and discuss cryptocurrency. The actor says the breach occurred on **October 30, 2026 at 1:33 PM EDT** and characterizes the release as a leak rather than a ransom event. The post highlights **23K+ phone numbers** and **9K+ email addresses**. The archive is described as **JSON Lines**, with an uncompressed file named **DEFYCLUB\_UNIQUE.JSONL** at **6.4 MB** and a compressed archive at **805 KB**. **The dataset, its source, the stated counts and current availability have not been independently verified.** ### Post details OrganizationDefy Club Country![India flag](https://flagcdn.com/w20/in.png)India SectorSocial crypto / investment community Actor"GoreTerminal" Claimed accountsApproximately 23,149 FormatJSON Lines Archive sizes6.4 MB raw / 805 KB compressed Claimed breach timeOct 30, 2026 at 1:33 PM EDT ### What the post claims - Approximately 23,149 user accounts - 23K+ phone numbers - 9K+ email addresses - JSON Lines format - 6.4 MB uncompressed file - 805 KB compressed archive - Country field included - Email field included - Phone and international-phone fields included - Mobile-carrier field included - Internet-protocol address field included - User and account identifiers included - Platform / device fields included - Build and previous-version fields included - Registration-region fields included - Profile-created timestamp included - Source / status fields included - Sample records displayed - Free download advertised The visible sample contains structured user-account records including contact, carrier, device and network-related metadata. Individual phone numbers, email addresses, IP addresses and user identifiers shown in the sample are not transcribed in this report. Sponsored [ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) ### Screenshots [ Screenshot 1Source screenshot ![Defy Club data-leak listing showing the claimed breach time, approximately 23,149 user accounts, phone and email scope, and archive details](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/defy_club_india.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/defy%5Fclub%5Findia%5F1.png) [ Screenshot 2Source screenshot ![Continuation of the Defy Club leak listing showing sample JSON Lines records and a free-download section](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/defy_club_india_1.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/defy%5Fclub%5Findia.png) The supplied captures show the Defy Club leak claim, the stated breach time, account, phone-number and email scope, JSONL archive sizes, schema fields, sample records and a free-download section. Direct download access and personal sample values are not reproduced here. ### IOCs & identifiers Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the breach claim. | Type | Identifier | Source | | ------------------------- | ------------- | --------------- | | Actor handle | GoreTerminal | Screenshots 1–2 | | Named organization domain | defy\[.\]club | Screenshots 1–2 | The organization domain identifies the entity named in the claim, not malicious infrastructure. No malware hash, Tox ID, Session ID, Telegram handle or attacker-controlled infrastructure is visible in the supplied screenshots. Personal identifiers shown in the sample are not included in this table. ### Mapped techniques **Claimed** identifies behavior explicitly described by the actor. **Inferred** identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified. - Collection [T1213.006](https://attack.mitre.org/techniques/T1213/006/) [Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/) Inferred The listing presents a structured JSONL user dataset containing account, contact, carrier, device and network-related fields. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Defy Club systems. ### Potential impact If authentic, the claimed dataset could expose **phone numbers, email addresses, IP addresses, mobile-carrier information, device/platform details and account identifiers** for more than 23,000 users. The combination could support targeted phishing, SMS abuse, account impersonation, profiling or other privacy-related abuse. ### Status Unverified Dark Web Informer has **not independently verified** the dataset's authenticity, source, completeness, approximately 23,149-account count, phone or email totals, archive sizes, sample contents or the actor's claimed October 30 breach time. The supplied screenshots document the listing and visible sample records, not independent confirmation of the underlying data. Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=defy-club-data-leak-2026-10-30&utm%5Fcontent=threat-feed) and search there for this alert. [View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=defy-club-data-leak-2026-10-30&utm%5Fcontent=pricing-button) [Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=defy-club-data-leak-2026-10-30&utm%5Fcontent=footer)