Threat actor claims sale of 1 million records from Hungarian online shop
A threat actor on an underground forum claims to sell a database of about 1 million customer records from an unidentified Hungarian online shop. The claimed data includes full names, email addresses, home addresses and order amounts in forints with timestamps. The claim is unverified and the shop has not confirmed an incident, so the priority is monitoring scams that use this data.
What happened
A threat actor on an underground forum claims to sell a database of about 1 million customer records from an unidentified Hungarian online shop, according to DailyDarkWeb. The claimed data includes full names, email addresses, home addresses and order amounts in forints with timestamps. The claim has not been independently verified and the shop has not confirmed an incident.
Why it matters
If confirmed, it exposes customer names, emails and addresses, data that supports message-based scams impersonating parcel delivery or payment collection, as DailyDarkWeb assesses. The posted samples look like real customer and order records, with dates going back to mid-2024, raising the risk of fraud targeted at those customers.
What to do
Track the claim until it is verified and check whether your own records appear in the posted samples. Alert fraud and customer service teams about messages citing real orders and addresses.
For the technical team
- Affected
- Loja online da Hungria (não identificada no item) Loja online húngara não identificada; base alegada com cerca de 1 milhão de registros de clientes · Unidentified Hungarian online shop; claimed database of about 1 million lines of customer records (full names, emails, home addresses with street, postcode and city, order amounts in forints with timestamps).
- Exploitation
- Sale claim on an underground forum reported by DailyDarkWeb; no independent verification, no confirmation from the shop, no confirmed exploitation.
- Fix
- No applicable fix; the claim is unconfirmed and the shop is not identified in the sources.
- Vector
- Alleged database sale on an underground forum; the source of the alleged extraction is not described in the sources. No technical flaw identified.
- More details
- Posted samples look like real customer and order records with addresses, useful for parcel-delivery and payment phishing in Hungarian, per DailyDarkWeb. Order dates in the sample go back to mid-2024, so part of the data may be older. Full details are for DailyDarkWeb subscribers only.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
