Bloomberg · Breach

Threat actor claims sale of 130K+ Bloomberg records and crypto databases

Oct 28, 2026 · 1 min read

A seller on an underground forum claims to offer a database of more than 130,000 records attributed to Bloomberg, taken about three weeks ago according to the claim itself. The same listing includes data attributed to Decrypt, CoinBureau, CoinSnacks and CryptoWeekly. No company has confirmed an incident and no sample has been made public, according to DailyDarkWeb, which treats the case as an unverified claim.

By HIFY Radar newsroom Updated 10/28/2026 12:12 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum is advertising a database of more than 130,000 records attributed to Bloomberg, taken about three weeks ago according to the actor. The same seller lists data attributed to Decrypt, CoinBureau, CoinSnacks and CryptoWeekly. None of the companies has confirmed an incident, according to DailyDarkWeb.

Why it matters

If the claim holds, subscriber data could fuel phishing scams using these brands, especially fake crypto offers, DailyDarkWeb warns. The same analyst notes that bundled listings like this often come from newsletter or subscriber lists, third-party marketing tools, or older scraped data rather than core systems. There is no confirmation of a breach of critical systems.

What to do

Treat this as an unverified claim and monitor statements from the named companies. Warn customers and staff about phishing emails using the Bloomberg, Decrypt, CoinBureau, CoinSnacks and CryptoWeekly brands, especially crypto offers.

For the technical team

Affected: Bloomberg, Decrypt, CoinBureau, CoinSnacks, CryptoWeekly (alegação) Base de dados de mais de 130 mil registros atribuída ao Bloomberg; o mesmo vendedor lista bases atribuídas a veículos de · Companies named in the claim: Bloomberg, Decrypt, CoinBureau, CoinSnacks and CryptoWeekly. No specific system or version was indicated.
Exploitation: Underground forum sale claim reported by DailyDarkWeb. No sample has been made public and the type of data has not been specified. None of the named companies has confirmed an incident.
Fix: No fix announced. No patch applies; if relevant, review exposure of marketing and newsletter lists.
Vector: Method of acquisition not specified in the sources. DailyDarkWeb assesses that bundled listings like this often come from newsletter or subscriber lists, third-party marketing tools, or older scraped data rather than core systems.
More details: Record counts claimed by the seller: Bloomberg 130,000+; Decrypt 535,000+; CoinBureau 530,000+; CoinSnacks 300,000+; CryptoWeekly 186,000+. The actor says the Bloomberg data was taken about three weeks ago and offers samples privately to buyers. Source: DailyDarkWeb on X.