Qatar National Bank · Breach

[Single source] Claim: Actor Says It Leaked About 25 Million QNB Records

· 1 min read

The actor UNC6783 claims to have leaked about 25 million customer records and about 28,000 employee records from Qatar National Bank. Sample rows were shown, but no full dataset, download, or price was posted, and QNB had not commented publicly. The claim remains unverified; customers should be wary of unsolicited contacts claiming to represent the bank.

WhatsApp LinkedIn X
CriticalBreachNo software to update

In 30 seconds

DailyDarkWeb
Alleged

The latest report does not confirm a QNB breach. DailyDarkWeb says an actor named UNC6783 claimed to have leaked about 25 million customer records and 28,000 employee records, but only sample rows were shown, with no complete dataset, download link or price.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

What happened

Alleged

DailyDarkWeb reported that UNC6783 posted the claim on an underground forum on November 10, 2026. The account explicitly described the supposed leak as an unverified threat actor claim rather than confirmation that QNB was breached.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Why it matters

Inferred

If the samples reflect genuine bank data, combining card details with names, addresses and phone numbers could make fraud and convincing bank impersonation easier. That risk is conditional because the underlying dataset has not been verified.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

What to do

Inferred

QNB customers should be cautious with unexpected calls or messages claiming to represent the bank. Do not treat knowledge of personal details as proof that a caller is legitimate, since the reported information could support targeted impersonation if genuine.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Confirmed and still uncertain

Observed

The report shows that a claim and sample rows were posted. It does not establish that the samples are authentic, that the claimed record counts are accurate, or that a complete dataset exists. DailyDarkWeb also said QNB had not commented publicly at the time of its post.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

What people are saying

Observed

DailyDarkWeb urged readers to treat the post as an unverified claim, not as confirmation of a breach. Its analyst note warned that the reported mix of card and contact information could enable card fraud and phishing if authentic.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Evolution

Observed

The reported sequence begins with UNC6783's alleged underground forum post on November 10. DailyDarkWeb then publicized the claim and samples, while emphasizing that no full dataset, download or sale price had appeared and that verification was still missing.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

The claimed customer fields include identifiers, names, gender, nationality, home addresses, telephone and mobile numbers, ATM card numbers and QMiles loyalty data. The supplied report does not describe how QNB's systems were supposedly accessed or how the records were obtained.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Sources and evidence

Observed

The supplied evidence consists of one DailyDarkWeb post on X, accompanied by an image and a summary of the alleged forum listing. It provides no QNB statement, independently verified records, complete database, download link or corroborating source, so the central leak claim remains unverified.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Sources

  1. DailyDarkWebx.com · DailyDarkWeb · x

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click