Actor alleges sale of Neighbourly database with 213,391,325 lines
A threat actor using the alias Mr_Raccoonn is advertising on a dark web forum the sale of a database allegedly taken from Neighbourly.co.nz, New Zealand's community social network. The claimed dump holds 213,391,325 lines and about 150 GB, with names, emails, phone numbers, addresses, private messages and geolocation coordinates, backed by JSON samples. The claim is unverified, Neighbourly has not commented, and lines do not equal unique users; monitor official channels and await confirmation.
What happened
A threat actor using the alias Mr_Raccoonn is advertising for sale on a dark web forum a database allegedly taken from Neighbourly.co.nz, New Zealand's community social network. The claimed material totals 213,391,325 lines and about 150 GB, with personal data and private messages. The claim is unverified and Neighbourly has not commented.
Why it matters
If confirmed, the data exposes names, emails, phone numbers, physical addresses, private messages and geolocation coordinates of users in New Zealand. Home addresses tied to private conversations raise phishing, fraud and harassment risk for those people. Lines are not unique users, so the number of affected people is likely far smaller.
What to do
Treat it as an unconfirmed claim and monitor Neighbourly's official channels. Advise staff and customers using the platform to change passwords and watch for unexpected contact. Review whether the company keeps any data on that network.
For the technical team
- Affected
- Neighbourly.co.nz, rede social de vizinhança da Nova Zelândia; base alegada com 213.391.325 linhas · Neighbourly.co.nz, New Zealand's community social network; versions not mentioned.
- Exploitation
- Sale advertised on a dark web forum by the actor Mr_Raccoonn, with JSON samples shared as proof, reported by DailyDarkWeb. Unverified claim, with no confirmation from the victim or third parties.
- Fix
- Not applicable; no confirmed flaw and no fix cited in the sources.
- Vector
- Method used to obtain the database is not described in the sources.
- More details
- Fields claimed in the dump: full names, emails, phone numbers, physical addresses, bios, account status, registration details, private messages, forum posts and geolocation coordinates. Claimed volume: 213,391,325 lines and about 150 GB. DailyDarkWeb notes that lines are not unique users and the real number of affected people is likely far smaller. Neighbourly has not commented.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
