Actor claims leak of 21.6 million parenting…

CriticalBreachNo software to update

In 30 seconds

Alleged

A forum seller allegedly wants $50,000 for 21.6 million records attributed to an unnamed Southeast Asian parenting app. The claim remains unverified, and no company has confirmed a breach.

What happened

Alleged

DailyDarkWeb reported that a threat actor advertised the alleged database on a dark-web forum. The seller reportedly described the unidentified service only as Southeast Asia's largest parenting app, leaving the claimed source unresolved.

Why it matters

Inferred

If authentic, the combination of contact, household, pregnancy and child information could help scammers build unusually convincing messages aimed at parents. The potential harm is therefore greater than with a list containing only email addresses, but it depends on data that has not been authenticated.

What to do

Inferred

Users of parenting apps in the mentioned markets should be cautious with unexpected messages about pregnancies, hospitals, children or account problems. Do not trust a message merely because it contains personal details, and verify requests through the app or organization's official channel rather than supplied links or phone numbers.

Confirmed and still uncertain

Alleged

The seller allegedly provided a record count, price, geographic breakdown and list of fields. The app's identity, the data's authenticity, how it was obtained, whether the records are current and whether the affected organization knows about the claim all remain unknown in the supplied evidence.

What people are saying

Observed

DailyDarkWeb explicitly labeled the claim unverified and said the seller had not named the app and no company had confirmed a breach. It also warned that pregnancy and child data, if genuine, could enable targeted scams against new parents.

Evolution

Observed

The supplied evidence shows one public development: DailyDarkWeb posted the allegation on November 14, 2026. This evidence set contains no subsequent company confirmation, independent validation or identification of the purportedly affected app.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

The advertised fields allegedly include names, email addresses, phone numbers, physical addresses and birth dates. The seller also claimed the dataset contains 117,000 Singapore NRIC numbers, household income and housing information, pregnancy details for 157,000 users, due dates, hospitals and information about children.

Sources and evidence

Observed

The entire available case rests on one DailyDarkWeb post relaying a forum seller's assertions and accompanying image. There is no named victim, company statement, sample validation or independent corroboration in the supplied evidence, so the existence and origin of the advertised database remain unconfirmed.