Follow the Money · Breach

Actor claims leak of 5,909,601 records from Follow the Money

Nov 05, 2026 · 1 min read

A group on a hacker forum claims to have dumped 5,909,601 records from Follow the Money (ftm.nl), the Dutch investigative journalism platform. The claimed material includes a reader/subscriber export and research datasets on company registry, party financing and state aid. The claim is unverified, Follow the Money has not commented, and part of the data looks like research built from public records.

By HIFY Radar newsroom Updated 11/05/2026 07:27 AM Get this every day →← Back to the feed 1 source

HighBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A group announced on a hacker forum a dump of 5,909,601 records from Follow the Money (ftm.nl), a Dutch investigative journalism platform. The claim includes a reader/subscriber export and research datasets on company registry, party financing and state aid. Nothing has been independently verified and the outlet has not commented.

Why it matters

The main risk is the reader/subscriber export: subscribers of an investigative outlet could face targeted phishing or pressure. The source notes part of the claimed data looks like research built from public records, which may inflate the headline number. There is no confirmation of a breach so far.

What to do

Watch Follow the Money's official channels for confirmation or denial. Subscribers should watch for phishing emails and change passwords used on the site. Security teams can monitor forums for the dump's contents.

For the technical team

Affected: Follow the Money (ftm.nl), plataforma holandesa de jornalismo investigativo sobre corrupção e crimes financeiros; dump a · Follow the Money (ftm.nl), Dutch investigative journalism platform. Claimed data: reader/subscriber export, company registry, party-financing and state-aid research datasets.
Exploitation: Unverified threat-actor claim on a hacker forum; Follow the Money has not commented. Reported by DailyDarkWeb.
Fix: Not applicable (alleged data leak, no software fix).
More details: Analyst note from the source: part of the claimed data looks like research sets built from public records, which may inflate the headline number; the reader export is the real risk, with possible targeted phishing or pressure on subscribers.