> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Korean Delivery Platform FLY Allegedly Dumped in Full After Backend Left Open to Anonymous Write Access - URL: https://darkwebinformer.com/korean-delivery-platform-fly-allegedly-dumped-in-full-after-backend-left-open-to-anonymous-write-access/ - Published: 2026-08-14T17:33:48.000Z - Updated: 2026-08-14T17:33:48.000Z - Author: Dark Web Informer - Tags: Data Breaches Breach Report ![South Korea flag](https://flagcdn.com/w40/kr.png)South Korea Food Delivery / Cloud Misconfiguration $60,000 USD ## Korean Delivery Platform FLY Allegedly Dumped in Full After Backend Left Open to Anonymous Write Access A forum user posting as **exfilar** is offering what they describe as a complete live extraction of the production backend behind **flyfly.co.kr**, a Korean food-delivery platform, listed at **47.9 million rows across 46.6GB** and priced at **$60,000 in Monero**. The seller states the project's Firebase rules were absent entirely, leaving Firestore and Cloud Storage **readable and writable without authentication**. The claimed contents include **resident registration numbers with plaintext passwords for 11,629 delivery riders**, 6.16 million orders carrying customer GPS coordinates and apartment entry codes, and payment-gateway keys for thousands of restaurants. The listing is dated **hours after the newest records** it contains. The claim is **unverified**. Severity CRITICAL Volume46.6GB Rows47.9M Asking price$60,000 Actorexfilar ### ▣Post details Targetflyfly.co.kr (FLY / 플라이) Country![South Korea flag](https://flagcdn.com/w40/kr.png)South Korea SectorFood delivery logistics ListingSelling, XMR preferred Volume46.6GB, 47.9M rows, JSONL Root causeClaimed absent Firebase rules ObservedAug 14, 2026 Actorexfilar ### !Allegedly included - Resident registration numbers - Plaintext account passwords - Bank names and account numbers - Rider licence numbers - Live rider GPS positions - Customer names and phones - Home addresses to unit level - Building entry codes - Payment gateway API keys - Card terminal credentials - Store owner identity records - Push tokens and device IDs - IP-linked access logs - Delivery proof photographs ### ◱Screenshots [ ![flyfly.co.kr Korean food delivery database sale forum post screenshot, August 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872541.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872541.png) [ ![FLY platform orders and notifications collection breakdown in forum listing](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872542.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872542.png) [ ![Claimed sample records and stated use cases in the flyfly.co.kr listing](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872543.png) Screenshot 3 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872543.png) [ ![Pricing rationale and market comparison section of the FLY database listing](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872544.png) Screenshot 4 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2379856928765298734682973569872359872544.png) ### ⚠Potential impact If the listing is accurate, this is a **near-total exposure of everyone the platform touches**. Riders are worst affected: their records reportedly pair the Korean resident registration number, used for identity verification nationwide, with a plaintext password and a bank account in the same document. Customers appear across **6.16 million orders combining name, phone, address, precise coordinates, and, where delivery instructions were saved, the code that opens the building door**, which carries physical-safety implications well beyond ordinary fraud. The claimed **payment-gateway keys and card terminal credentials** for thousands of restaurants would put transaction infrastructure at risk, not just records about it. Most consequential is the claimed **write access**: a writable backend means records could be altered or payment details redirected, and the exposure stays live until the rules are corrected and every credential is rotated. ### iStatus Unverified The samples are internally consistent with a Firestore export and the field names match the structure of a Korean delivery platform, but consistency is not confirmation and the seller controls everything on display. **Row counts, collection sizes, and pricing are the seller's own figures**, and the valuation section reads as promotional. Dark Web Informer is **not reproducing the sample link, the contact route, or any credential, identifier, or address appearing in the posted records**. The account is recent, joined within the last two months, which is worth weighing against the scale of the claim. The claim is **unverified** and neither the platform operator nor Korean authorities have publicly addressed it. Want everything on this breach? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) [DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE