Actor claims 80 GB Reddit database on underground forum; unverified
A threat actor posted a listing on an underground forum claiming an 80 GB 2026 database tied to Reddit, with tens of millions of user records, emails, hashed credentials, backups and code repositories. DailyDarkWeb, which reported the claim, says there is no sample and no independent verification, and that such claims are often recycled, exaggerated or fabricated. Nothing has been confirmed; as a precaution, users can enable two-factor authentication and change reused passwords.
What happened
A threat actor on an underground forum claims to hold an 80 GB 2026 database tied to Reddit, with tens of millions of user records, emails, hashed credentials, backups and code repositories. The listing is thin and has no samples. DailyDarkWeb, which reported it, says there is no independent verification and that such claims are often exaggerated or fabricated.
Why it matters
If confirmed, the claim would imply risk of account takeover via reused passwords and possible exposure of internal material and code. Today there is no evidence that Reddit data has leaked. Given Reddit's large user base, monitoring is worthwhile without raising alarm.
What to do
Treat as an unverified claim, with no public statement. Recommend two-factor authentication on Reddit and changing reused passwords. Monitor intelligence channels for samples or confirmation before any further action.
For the technical team
- Affected
- Reddit (base de dados de usuários e material interno, segundo alegação em fórum subterrâneo) · Reddit platform, per the claim. No specific version, system or component was cited.
- Exploitation
- No exploitation reported. Claim circulating on an underground forum (RaidForums-style clone), reported by DailyDarkWeb; no sample and no independent validation in the captured material.
- Fix
- No fix applicable. Cited precautions: enable two-factor authentication and change reused passwords.
- Vector
- Unknown. The listing only claims possession of data; no intrusion method, flaw or access vector was described, and the claim is unverified.
- More details
- The listing, titled "[80GB][2026] Reddit[.com]", alleges tens of millions of registered user records, usernames, registration emails, hashed credentials, system backups, source-code repositories and internal HR/business documentation. DailyDarkWeb frames it as an unverified marketplace claim and notes that large full-platform dump narratives are frequently recycled, exaggerated or fabricated. Details of the underlying source are subscribers-only.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
