Suposta base de pedidos da Digikala · Breach

[Single source] Actor claims leak of 3 million Digikala order records

Nov 10, 2026 · 1 min read

A threat actor claims to hold more than 3 million records from Iranian marketplace Digikala. The alleged data includes order identifiers, names, addresses, phone numbers, and package details.

By HIFY Radar newsroom Updated 11/10/2026 07:17 PM Get this every day →← Back to the feed 1 source

HighBreachNo software to update

In 30 seconds

Alleged

DailyDarkWeb reports that an actor on an underground forum claims to possess more than 3 million Digikala order records. The report says the material includes customer names, addresses, phone numbers and purchase details, but the claim has not been independently verified and no Digikala response is included.

What happened

Alleged

According to DailyDarkWeb, the unidentified actor advertised a database allegedly connected to Digikala, an Iranian online marketplace. The purported contents cover order and tracking identifiers, sender and recipient information, and package records.

Why it matters

Inferred

If authentic, combining home addresses and phone numbers with purchase and delivery information could make fraudulent messages unusually convincing. Criminals could pose as a retailer or courier and refer to a real order detail to pressure recipients into opening links, paying fabricated fees or disclosing more information.

What to do

Inferred

Digikala customers should treat unexpected delivery messages cautiously, avoid opening links sent by unfamiliar accounts and verify order status through the marketplace's usual app or website. Requests for urgent payments or additional personal information deserve particular scrutiny because the claimed fields could support delivery-themed impersonation.

Confirmed and still uncertain

Observed

The evidence establishes that DailyDarkWeb published the allegation and described the claimed database fields. It does not independently establish that the dataset exists, contains more than 3 million genuine records, came from Digikala or represents a new breach. The supplied material also contains no sample validation, technical account of access or statement from Digikala.

What people are saying

Alleged

DailyDarkWeb explicitly labels the report an unverified threat-actor claim and says Digikala has not commented. Its analyst note warns that the alleged combination of identity, location, phone and purchase data could enable targeted fraud against Iranian shoppers.

Evolution

Alleged

The visible chain begins with an unidentified forum actor allegedly claiming possession of the records. DailyDarkWeb then amplified that claim on X while adding a warning that authenticity remained unverified. No later confirmation, denial or investigative update appears in the supplied evidence.

Reach

Observed

1 independent groups, 1 updates, and 1 engagements.

Technical detail

Alleged

The actor allegedly lists order and tracking IDs; sender store names, addresses and phone numbers; recipient names, provinces, cities, full addresses and phone numbers; plus item names, registration dates, package weights and statuses. The report offers no file format, database schema, extraction method or forensic evidence tying those fields to Digikala systems.

Sources and evidence

Observed

The substantive evidence is a single DailyDarkWeb post on X containing a secondhand summary of a subscriber-only underground-forum claim and an accompanying image. The supplied batch does not include the original forum listing, database samples, independent researcher validation or a Digikala statement, so the central allegation remains unconfirmed.