Skip to content

Tayara Data Breach: Hacker Claims 2M+ Tunisian User Records for Sale

Breach Report Tunisia flagTunisia Classifieds

Tayara Data Breach: Hacker Claims 2M+ Tunisian User Records for Sale

A threat actor using the alias KLINZO007 claims to be selling the full user database of Tayara (tayara.tn), described as the largest online classifieds platform in Tunisia. The listing advertises over 2 million records (about 4 GB) including full names, active mobile numbers, email addresses, and hashed passwords, alongside ad and listing data, and is offered via a Telegram/TOX contact. The claim is unverified and Tayara has not publicly addressed it.

Data2M+ records / 4 GB
PriceTelegram sale
CountryTunisia flagTunisia
ActorKLINZO007

Post details

TargetTayara (tayara.tn)
CountryTunisia flagTunisia
SectorOnline Classifieds / Marketplace
ClaimFull user database offered for sale
Data2,000,000+ records, ~4 GB
ObservedJun 5, 2026
PriceTelegram sale
ActorKLINZO007

!Allegedly exposed

  • 2,000,000+ user records (claimed)
  • Full names (first & last)
  • Active mobile phone numbers
  • Email addresses
  • Hashed passwords
  • Ad titles & descriptions
  • Listing prices
  • Categories & locations (Tunisia-wide)

Screenshot

Potential impact

If genuine, a database of 2 million+ users with names, active phone numbers, emails, and hashed passwords would enable large-scale phishing, SMS fraud, and account-takeover attempts (especially if weak password hashes can be cracked) across much of Tunisia's online population. The ad, price, and location data adds context that can make targeted scams more convincing. Record counts and authenticity are unconfirmed.

iStatus

Unverified

A data sample and a sale offer were posted to an underground forum, with Telegram and TOX contacts for buyers; the sample records and contact identifiers are not reproduced here. The claim has not been independently confirmed and Tayara has not publicly addressed it.

Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest