Data Breach Exchange General

Post data breach news, download or torrent links to breaches, or data breach sources. Also post past data breaches you are looking for. Data Breach Sources: https://en.wikipedia.org/wiki/List_of_data_breaches - Wikipedia list of past data breaches https://sizeof.cat/post/data-leaks/ - Large list of data breaches with torrent links https://breachforums.is - Data breach forum, decent selection, uses a credit system to download leaks https://ddosecrets.com/wiki/Distributed_Denial_of_Secrets - "Journalist non-profit devoted to publishing and archiving leaks" https://wikileaks.org/ - One of the original data breach operations, with a political twist https://enlacehacktivista.org/ - Hacktivist wiki designed to "[p]rovide a space for hackers to publish their hacks, leaks, and communiques" Check Data Breaches: https://haveibeenpwned.com/(USER WAS WARNED FOR THIS POST, You should always elaborate on your opinions rather than just spilling the soykaf.)

Where do sell data breaches in the $current_year? Lain is not russophonic, which makes the search considerably harder.

>>22951 More links to database dumps can be found here: https://github.com/hacxx-underground/Files-1 https://github.com/hacxx-underground/Files-2 It's from last year, so some links are expired, but many are still good. Please post more. I love collecting breach data.

>>22954 I do not vouch for any of these forums, or for buying data breaches. Proceed at your own risk. The only place I know of is BreachForums. A company by the name of rosgosstrakh (RGSL/росгосстрах) got hacked [0] some time ago, with the seller advertising it on BreachForums [1]. There are almost certainly other forums to sell breach data, such as XSS[2][3], Cracked[4], Nulled[5], HackForums[6], and so on. There are some forums listed on SizeOf(Cat)[7], though it is worth noting that the BreachForums link provided is outdated. There are also likely various Discord servers, Telegram channels, IRC channels, XMPP servers, and the like that facilitate the buying and selling of data breaches. [0] https://maia.crimew.gay/posts/rosgosstrakh-hack/ [1] https://breachforums.is/Thread-Rosgosstrakh-700K-Customers-400GB [2] https://xss.is/ [3] https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/ [4] https://cracked.io/ [5] https://www.nulled.to/ [6] https://hackforums.net/ [7] https://sizeof.cat/links/

>>22956 This is a long list, but by no means complete or exhaustive. Data breach sources come and go. > Torrents There are likely plenty of torrents floating around with breach data. Said torrents may lack seeders, so you may have to wait for some time. BitTorrent search engines such as BTdig[0] and BT4G[1] can be helpful. > Blogs Various blogs can sometimes have links to breaches, or at least sources to them. Beyond the aforementioned SizeOf(Cat) list of data breaches, SizeOf(Cat) has also done write ups on various data breaches[2]. There are some listed on the maia kitten blog[3]. I wouldn't call this a data breach as it's open data, but OhShint! maintains a list of open data sets[4] for OSINT purposes. Michael Bazzel of IntelTechniques plans to release a OSINT breach data guide [5] in the future. Until then, his book on OSINT Techniques has a chapter on data breaches. It can be found on Anna's Archive[6]. He has some podcast[7] episodes on finding and managing breach data that may be relevant. His podcast has been removed from SoundCloud and all other sources, and he has stated that 'it is on an indefinite "hiatus”'[5]. That being said, a torrent of all previous podcast episodes (except for Episode 306), as well as AI-generated text transcripts, exists here[8]. > Telegram Various Telegram channels can have data breaches posted. The OSINT Techniques book has some notes on this. They come and go, but here are some that are still up as of writing: BreachForums: - BreachForum Official Announcements[9] - BreachForum Archive Repo[10] - BreachForum Archive Repo Chat[11] - BreachForum "New breach added to official section"[12] Baphomet (Administrator on BreachForums) - Official Updates from Baphomet[13] - The Jacuzzi (Chat started by Baphomet after the fall of the first BreachForums)[14] search.0t.rocks Related: - Zero Trust LTD[15] - Zero Trust LTD Chat[16] - Illicit Services LTD Leaks Sharing Chat[17] > Ransomware Gangs Breach data often comes from ransomware groups such as LockBit, ALPHV, etc. Said groups have onion sites where they post their breaches. There are projects designed to monitor these groups such as Ransomwatch[18], as well as Twitter bots such as the Ransomware News bot[19]. The former maintains an up to date index on these groups and their onion sites. > Archives/Libraries Archive.org has several data breaches: A LinkedIn users breach from 2015[20], a SnapChat data breach[21], a Nulled.io breach[22], a BlackHat forums breach[23], and a HackForums scrape[24]. They also host the NVidia leak[25]. > Image Boards 4Chan has been a source of quite a few breaches over the years. Notable ones include the Twitch data breach[26], a NovelAI leak[27], the Stable Diffusion leak[28], the Facebook AI leak [29], and so on. > News Outlets Various news sources report on data breaches. Some, such as DataBreaches.net[30] and KrebsOnSecurity[31] list the source of the breach in question. With some basic digging, you should be able to find the original source and download it. More mainstream news sources will be more coy about the source of the breach, but they can be a decent start. > YouTube/Odysee There are some YouTubers who post about data breaches. Mental Outlaw[32] does this, and sometimes includes the links to the breach in his Odysee channel[33]. If he does not link it himself, there is likely someone in the comments that has. SomeOrdinaryGamers[34] (Odysee)[35] also does this from time to time. > Twitter There are Twitter accounts for data breach forums, monitoring and reporting on data breaches, threat actors, and so on. Forums: HackForums[36], OnniForums [37], XSS [38]. Reporting: VX-Underground (somewhat)[39], Have I Been Pwnd [40], OhShint![41] (somewhat)[42], SOSIntel[43]. People: cybersecuwu (creator of search.0t.rocks search engine)[44] > Search Engines Not quite a download source for data breaches, but it can be a way of learning what is out there. Data breach search engines exist [45], but conventional search engines such as Yandex[46] can also be effective. Links [Too many links, flood detected]: https://pst.moe/paste/xdkwyv Archived: https://archive.ph/erJVY

>>22963 Ive pretty much exclusively used torrents now, no point in paying for public db's from skid forums. alternatively could just be a lazy fuarrrk and use snusbase or whatever other weleakinfo replacement is floating around currently I thought the guy who ran illicit services shut down the website?

https://www.ransomlook.io/recent If you're not already doing so. Ransomlook is probably the best place for near real time data on breach's. It covers a lot of groups and provides a screenshot of said update from the group. You can even run your own mirror if you'd like to do so.

>>22965 Could you post some magnet links to torrents you've found? All the ones I've found have been somewhat lacking.

>>22969 n00b question - is it possible to somehow download individual files from bittorrent if I don't want the entire 500GB torrent?

>>22986 Yes, it is possible if it's seeded.

>>22986 open torrent right-click torrent -> stop/pause click any file ctrl-a right-click -> priority -> don't download click desired file shift-click to select contiguous, ctrl-click to select arbitrary right-click -> priority -> normal right-click torrent -> start

>>22986 how horribly gay that we live in an age that someone that does not know how to work a torrent client has access to haxx0red private data

what do you with this data do you place it on your table and gloat over it

>>22965 >>22969 Bumping this

Are there places where fb, tinder etc. complete data dumps from hacked accounts are posted?

>>22969 >>23025 Hey coming back sorry for being late, have been studying. You can use whatever torrent aggregating site you'd like, but in the past I have used BTDig Data dump collections can be found on DHT search engines like BTDig along with their magnets. All 4 magnets found in the links below should be live with active seeders. Search with keywords like leak/Dump or just the site name if you don't see something you like here Few examples of db collections I have found searching through BTDig https://btdig.com/595ff005ad0faf81c7126f07e30f50384345d746/ <---- 388.29 GB torrent from 5 years ago https://btdig.com/85f39f1d94917d61277725e7da85d8177a5c12eb/ <------ 593.90 GB torrent from 6 years ago https://btdig.com/ba304cab082bad215263bd7f66902e128eccc7a3/ <-------- 595.32 GB torrent from 4 years ago https://btdig.com/85ae71166b3129f0f9517c7dc6417de5f3e8cfd3/ <------- 448.93 GB torrent that looks pre-parsed from 8 months ago Tool for managing data breaches. https://github.com/sensepost/Frack "Frack is an attempt at creating an end-to-end solution to store, manage and query your breach data. The tool has got a very basic workflow, making it easy to use." Can also just grep or whatever way you prefer to look through it, I believe there is an ongoing topic about this right now you can check in on. Also, heath from TCM Academy has put this on his GitHub https://github.com/hmaverickadams/breach-parse "A tool for parsing breached passwords" that includes a torrent link of 40gb of db dumps Not really sure what is wrong with BTDig right now as when ever I try to access the site it just sends me through an infinit loop, I wanted to double-check that all of my links were active & do a few more searches to try and find other stuff, hopefully they come back online soon and you guys can try it out

>be me >enter website >"please enable javascript and cookies" muh security moment

>>23110 No worries, thank you for the reply! As for BTDig being down, the URLs can be converted to legitimate magnet links with the following command: `sed 's|*.com/|magnet:?xt=urn:btih:|g' <URL_TO_PARSE>` Or just replace "https://btdig.com/" with "magnet:?xt=urn:btih:". Mind you, this approach means the magnet link does not include various torrent trackers, which may reduce the number of peers. Alternatively, you can proxy the site through The Internet Archive or archive.today and get the magnet link that way.

is https://rebreached.vc/ legit?

>>23161 Kind of just looks like a breached clone Another random skid forum Would not recommend singing up with any credentials here that you want leaked back to you just create a throw away account and lurk / can probably downlaod the DBs in a vm to avoid getitng a virus if thats what you are interested in

>>23161 All of the servers of breached got taken by the feds, what do you think???

>>23161 >>23180 Breached has an onionsite. Just use that. breachedu76kdyavc6szj6ppbplfqoz3pgrk3zw57my4vybgblpfeayd[dot]onion >>23190 >All of the servers of breached got taken by the feds, what do you think??? Old news, Breached is under new ownership.

>>23180 Most of the big data breaches are posted on BreachForums, I don't think it's just a skid forum.

>>22951 Related book that recently released: https://hacksandleaks.com/contents.html Published under creative commons, author is same guy who created Onionshare and dangerzone.rocks Aimed at journalists, but I poked around a few chapters and it has quality enough that Lain might appreciate Tutorials are flavored with the actual experiences of the author working with datasets as a journalist, so its a fun read Foudn the appendix chapter on web scraping personally useful

lmao who put a warning on this post so dumb anyway does anyone know what xlotl or qbit (not the malware) is and how to access? someone said i need xss.is account

>>23193 >Breached is under new ownership Yeah, federal ownership

nulled.to is not scam should i buy vip for DBs?

bought nulled.to vip all is ok not scam

Already asked this in another thread, but fuarrrk it. Is there any other service on the clearnet or dw like search.0t.rocks? It was honestly the best option to getting free info.

>>23617 snusbase its not free but I found better results there its almost as good as Weleakinfo was

anyone knows where to find Yandex Food leak?

Anyone have a torrent link to the pandabuy breach or any of the new stuff from intelbroker?

>>23468 Na mate, you really don't need it lmao Just go on breached using their .onion Create a brand new account and spam 8 messages to get 8 credits (most dbs cost 8 credits) and download You'll get derezzed for spamming but mods are asleep 23/h24 Make a new account and repeat I dnlwded 150+ dbs this way, for free

>>23744 Geniuses on this forum, thanks boss never thought about doing that

>>23744 Well thank you i will try it later i get some needed breaches and i try your method

Inspired. So here. For lain. If you're like me, you've avoided breachforums until now. I glanced at the forums once and realised few there are interested in learning things. And even fewer have character. But recently, it got personal. The AT&T leak. I want to see if I'm in it. Two problems: a. Out of tune with the torrent world. I can't find a magnet. b. No secure way to torrent. No VPN. I'll have to get it from the source. The Mission: Find out what you can about BF. Get the AT&T db and get out. Something you need to know: this place is unpleasant, lain. I lick the walls of the site and the flavour is sterile concrete. The stench is dystopian and oppressive: the smell of a thousand sweaty adolescent boys being funnelled into the engagement mines. A reminder, lain: BF isn't meant for you and me. It's meant to capture the hearts of desperate teenagers because they don't know better, and harvest them for what little soul they have. It's like TikTok, or Facebook, or any other part of the web that locks you down and exploits you for all that you're worth, except this time they've dropped the pretense of being nice people. With the recent influx of tourists, I blend in. The site is carefully designed and well-made. Insidious architecture - built like a fuarrrkin' prison. Registration greets you with two captcha-likes: the classic distorted ascii and a simple question selected or generated from a list. If I was doing user registration and wanted to prevent people from making auto-accounts, this is how I would do it, barring proof-of-work. The first thing you notice upon entrance is that the important soykaf is hard to see. They have a credits system, and it defines the site. The explicit purpose is coercive: you must engage with the site, then you can download the database. It claws conceptually at the mystique captured in popular imagination of dark, illicit dealings and cool, calculating transaction - but it is not that. Every post is hidden until you reply to it. Or give the administrators money. And like most people there, I'm broke and just here for data. That means 17 pages of frivolous and misspelled thank-yous under every post, from people who don't actually care. The scheme is unfulfilling, but that doesn't matter. As long as a few high-performers produce stuff teenagers can click on. And they are teenagers. You can tell. Sometimes, they'll tell you. The shibboleth is the lack of a developed prefrontal cortex. They'll say they're "into shady stuff" unprompted, proud at themselves. The questions are asinine. They don't know why they're there. I make posts for the database. It isn't hard. The admins are lenient because they have to be. Due to tourists, they increased the amount of posts before credits are assigned and it will probably stay that way for a while. Just another chain to keep you there, tied to them. I bide my time. Try to fly under the radar and learn why anyone wastes breath there. I look through profiles with high post counts to see how they avoided bans, but don't find much to go on. Not that it's priority to grok the spam filter; I'm not staying long. Most threads are worthless. A few lines of text, a couple of links: that's 35 pages of replies. It's engagement-fed, remember? You are incentivised to give as little as possible, hell, copy-paste soykaf, doesn't matter as long as no-one realises. You're already better-off than them if you're here, lain. It takes a few days. I download it. I'm not in it. And then I'm gone.

>>23841 The net is a kindergarten actually. The screens are a lullaby for their minds, looking for attention in the darkness. They feed the number required for the AD machine keeps walking in an agonize breath.

Does anyone have a source for the verifications.io dump? There's a torrent for it, but nobody is seeding.

is nobody here going to discuss the recent dump of millions of SSNs ? I though this place would have a whole thread about it.

>>24582 The data collection company National Public Data got breached some time back (April 2024). It has recently been made available for free on BreachForums. Original forum post: http://breached26tezcofqla4adzyn22notfqwcac7gpbrleg4usehljwkgqd.onion/newreply.php?tid=130973&replyto=740352 Video discussion (via Mental Outlaw): https://youtu.be/watch?v=bkpfUKP7T-Y (Odysee mirror: https://odysee.com/@AlphaNerd:8/i-downloaded-3-billion-leaked-records:1) If the download link is down and you want to download it from the official BreachForums CDN, do as >>23744 (and >>23841 ) say to quickly farm credits. Use Tor. On another note, the same threat actor recently leaked records (supposedly) from Tencent. Find them on BreachForums.

>>24583 Is it even real? Troy Hunt was saying he couldn't verify it.

>>24585 I'm assuming you mean this post by Troy Hunt: https://www.troyhunt.com/inside-the-3-billion-people-national-public-data-breach/ Some people have been able to find known relatives in the breach: https://twitter.com/vxunderground/status/1797047998481854512 Only time will tell, I suppose. In the meantime what legitimate information is available in the breach will likely be used for cyber crime.

>>24585 It's definitely real. Checked against multiple generations of relatives in generations X and Z. Confirmed socials for gen X, nothing at all for gen Z.

>>24583 Yea there is a torrent version of the NPD files (50.20GiB) magnet:?xt=urn:btih:3caa71f3ec8cbccc6fca4feb7185da2bab149ba7&dn=NPD&tr=udp%3a%2f%2ftracker.opentrackr.org%3a1337%2fannounce The password to the files are "https://usdod.io/"

Russian government database of Rosreestr, part1: https://gofile.io/d/sSMf3n @crowsilent Archive 5.8 GB, after extraction: 44.1 GB Hackers are claiming they got more than 1 TB of data. They will release it soon: https://tvrain.tv/news/hakery-zajavili-o-vzlome-rosreestra-i-krazhe-dannyh-rossijan-v-rosreestre-utechku-otritsajut-560280/

>laptop data breach frazzledrip No, don't go looking for it. Feds will hunt you for knowing about the wicked crime. Feds cover up and protect pedos who commit such heinous acts.

Another Russian-related data breach. Rostelecom, the largest Russian Internet-provider was hacked. Two files in this leak: 1) Contacts of sales contractors 2) User complaints and requests Link: https://gofile.io/d/3azs9n Password to archive: @silentcrow_join

Heard rumors about discord leak, someone posted csv file with usernames, IP, last login time. Any details lainon?

VirusTotal gives me a lot signature warnings for many of these files. I would be careful what you download from the internet, you're doing it at your own risk.

Federal Service for Accreditation and Standards (RU): https://gofile.io/d/gl5xss Digital Government of Russia: https://gofile.io/d/JAa1YO Russian Railways (in JSON): https://gofile.io/d/OJ1ZlG

>>25788 Could just be stealer logs compiled together, I havent seen anything of it but I dont know if it could be a private DB

Safe to assume everyone's aware of the kerfuffle going down back in the homeland? Think the resident containment zone will be resurrected, or has Hiroshimoot's ineptitude finally put the nail in the coffin?

>>26133 I've seen a post from wapchan linking to their IRC - don't ask me for source, i don't even know if it's real - saying they are "implementing new security measures" and that the website will be back in two or three weeks. even if that's real i personally i think they will get pwned again because they are incompetent and seem fixated to continue using their soykaf code. There's no way they can fix their code and audit it in that short of a time and expect it to be secure. OR desuwa - which is one of the three users in their freebsd server and is probably the real "manager" of the website since hiro can't even speak english - just gave it the "we'll be back in two weeks" post but eventually they could probably realize they can't do jack soykaf and either go open source or sell it again. https://sizeof.cat/notes/1744719282 has most (all?) of the leaks, to recap the leak was: >list of janitors, mods, admins and their emails >source code >janitor board >git changelog (notice how desuwa was basically the only committer lately) >NO user data leaked because the sharty hacker "does not want to" and "does not have that information" Apparently he had access for a year or less. The .gov emails thing were a fake. The most dangerous thing is that they kept logs of every IP and location with every post, so if user data is eventually leaked, well i suggest everyone to change IP if you ever posted on the website and your ISP gives fixed addresses. Overall looks like janitors were irrelevant, mods were incompetent and hiro never updated critical parts of their base since moot left and just sporadically paid someone to make new features. Of course, management was lacking as the exploit was made thanks to a 2012 ghostscript version and a poorly secured "load pdf files" feature. This is what i got from reading various posters from soyjak.st, wapchan and reading through the leaks. Take all of this info with a grain of salt. With a leak as popular as this there's going to be rampant misinformation.

>>26134 Seems as comprehensive a breakdown as I've been able to find/see. The fact that their janitor board is on some geocities node of all places is as novel as it's hilarious. So, 2 week boilerplate after all that chaos? Seems extremely unlikely, especially given the state of the code base. Additionally, I would eat my shirt if half the moderation/janitor team stuck around after getting so thoroughly owned. >>NO user data leaked because the sharty hacker "does not want to" and "does not have that information" I saw that. cop-out of the century, but if I'm honest there's probably info in the passholder records that would get that retard killed. So as lame and gay as that is, I sort of understand the angle. My money's on a selloff.

>>26135 Maybe there's more info that i missed will surface this week, so if anyone know more please post. Reuters made an article about the hack by the way: https://www.reuters.com/technology/cybersecurity/notorious-internet-messageboard-4chan-has-been-hacked-posts-claim-2025-04-15/ > Additionally, I would eat my shirt if half the moderation/janitor team stuck around after getting so thoroughly owned. To be completely honest reading through their board the mods act like actual kids. I totally expected it from janitors but not really from the mods. IMO the main 1 or 2 guys (desuwa) were pretty detatched from everyone else and hiro was the most isolated. >My money's on a selloff. I agree, either that or he's an actual moral user that doesn't understand how hot his ass is right now.

>>26136 >To be completely honest reading through their board the mods act like actual kids. I totally expected it from janitors but not really from the mods. IMO the main 1 or 2 guys (desuwa) were pretty detatched from everyone else and hiro was the most isolated. I agree. Kind of shocked how retarded the vast majority of the moderators are. Expected of the janitors, but not the mods. I figured we would have seen many more .edu emails that we had. >I agree, either that or he's an actual moral user that doesn't understand how hot his ass is right now. Unthinkable. He's just a drone who didn't appreciate what he got into - that's my read, anyway. fuarrrking Reuters. Love it.

>>26136 I'm not surprised, the mods went pants on head retarded (and were probably paid by some cianiggers) in the last few years, especially on some boards like /tg/ and /k/.

>>26133 fuarrrk bros, I'm scared this killed the site for good. The mods were retards and the site was on life support after moot left but the community was like nothing else despite all that.

So where are all the best breaches being downloaded from these days?

>>26252 I collected most of the ones I wanted already, a lot of the ones worth anything can be found with just grabbing them from torrents. off chance I had a few "private" ones from breach forums that were re-posted to onniforums before it was shut down miss that lilshid every now and then some new ones come out and go scrounge around for them Others would just be stealer logs from whatever random telegram is posting old ones for free

Anyone got the Big one? The really big one that just came out?

anything like nu(lled) forums alternative? it was useful

>>26584 Honestly? Forums are like mushrooms after rain, they pop up and go down rather often. Sizeof(Cat) had a lovely list of leaks here: https://sizeof.cat/post/data-leaks/ Emphasis on *had*, archive here: https://archive.ph/eddPK Michael Bazzel's book recommends using Google (and other search engines) to look for Telegram channels for data breaches. Paying for forum credits, or grinding for them through throwaway posts, is a bit of a fool's errand. Everything will eventually trickle down. If you have the money, buy his book(s), they are worth the money. If not, well... `aHR0cHM6Ly9hbm5hcy1hcmNoaXZlLm9yZy9tZDUvMzNmMGYyNDg2ZWI0ZDBkMTdlMWU0NTc1NmFiMmM1NDA=` Mishaal Khan has a tutorial on basic OSINT and stalking yourself to see what's out there: https://www.youtube.com/watch?v=tJEGBmQjh-8 >>26564 >>23110 >>23353 All have good posts I can't speak for any other forums, as only time will tell.

breached26tezcofqla4adzyn22notfqwcac7gpbrleg4usehljwkgqd(.)onion (reborn - v4) has been compromised! I repeat: most likely, BreachForums has been compromised by LEAs. No more Breachforums! Pic strongly related + discuss in Twitter: https://xcancel.com/vxdb/status/1955127018225537136

>>26876 Is there a good alternative to breach for buying & selling DBs?

>>26876 I'm not a part of the scene other than a few articles read there and there but why is there an absolute mass of people talking about it on X? I'd be pretty worried if my e-mail and phone credentials where linked to somewhere where I talk about frequenting BF and knowing the people over there considering the governments shady past of flagging people as terrorists for using Tor or VPNs

Does anyone have the Quantas Airways and Vietnam Airlines dataset from the Salesforce hack before it was removed?

I don't know if this was already posted but here is leak with tons of data from a North Korean hacker from a group "Kimsuky" from 2 months ago : (2025/08/08) https://ddosecrets.com/article/apt-down-the-north-korea-files When it released it contained his valid VPS credentials, even emails etc... The dump is available here: - http://gdlvc66enozrke2pbcg2cnyhmfhzu77wo5g4qluebnas3qiqn4mgerid.onion/ - https://ddosecrets.com/article/apt-down-the-north-korea-files Picture of the post is a screenshot of the north korean hacker screen.

>>27323 North Korea is number one. They are the part of world fight with DA JOOS. They fight capitalism and american fascism! 결제를 위해 이 부분을 삭제하세요!

since bereach is dead, anyone knows alts? want to check myself iam too paranoid

>>27345 darkforums[.]st - clear net qeei4m7a2tve6ityewnezvcnf647onsqbmdbmlcw4y5pr6uwwfwa35yd[.]onion - dark net

>>27346 Pathetic RF copycat ran by skid who blacklist tor exit node IP.>>27346

>>27346 >>27346 https://breachsta.rs https://leakbase.la https://kittyforums.st

>>22951 Anyone have the recent KnownSec leaks? It was posted on girhub but taken down really fast. Others say it didn't even happen.