Softmood Base de dados de usuários do Softmood · Breach

Underground forum actor claims sale of 450K Softmood user records

Oct 28, 2026 · 1 min read

A threat actor on an underground forum claims to sell a dataset of about 450,000 user profiles from Softmood, an online classifieds marketplace in Egypt, including IDs, usernames, emails, phone numbers and listing data. The claim has not been independently verified, Softmood has not confirmed an incident, and the listing, first posted in mid-October, has recently resurfaced. If authentic, the data enables fake-buyer scams, WhatsApp fraud and targeted phishing against Egyptian users.

By HIFY Radar newsroom Updated 10/28/2026 03:12 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to be selling a dataset of about 450,000 user profiles from Softmood, an online classifieds marketplace in Egypt. Per the actor, the dataset holds registration data and sales listings. The claim is unverified, and Softmood has not confirmed an incident.

Why it matters

If authentic, the dataset links emails and phone numbers to listings and seller locations, enabling fake-buyer scams, WhatsApp fraud and targeted phishing against Egyptian users. Marketplace customers become exposed to personalized fraudulent approaches.

What to do

Monitor underground forums for new mentions and review the actor's sample if accessible. Warn users about phishing messages and fake buyers. No fix applies, as no incident has been confirmed.

For the technical team

Affected: Softmood Base de dados de usuários do Softmood, marketplace de classificados online do Egito; cerca de 450 mil perfis, segundo al · Softmood, an online classifieds marketplace in Egypt; about 450,000 user profiles, per the actor.
Exploitation: No confirmed exploitation. Sale listing on an underground forum reported by DailyDarkWeb; first posted in mid-October and recently resurfaced. The actor offers a sample and escrow. Softmood has not confirmed an incident.
Fix: No fix applicable; the claim is unconfirmed.
More details: Per the actor, the dataset has two sections: profiles (user IDs, usernames, emails, phone numbers, account creation dates and status) and listings (seller IDs, titles, categories, descriptions, prices, item condition, location and city, image links, listing dates). If authentic, combining them enables fake-buyer scams, WhatsApp fraud and targeted phishing against Egyptian users. DailyDarkWeb source details are subscriber-only.