Ayan Market · Breach

Actor claims to sell 98,921 Ayan Market customer records

Nov 02, 2026 · 1 min read

A threat actor on an underground forum claims to sell the customer database of Ayan Market, a Kazakh online marketplace: 98,921 customers and 74,359 addresses, with names, phone numbers, emails, birth dates and delivery addresses. Ayan Market has not confirmed an incident and the claim is unverified. Customers should watch for SMS phishing and delivery scams using this data.

By HIFY Radar newsroom Updated 11/02/2026 01:30 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to sell the customer database of Ayan Market, a Kazakh online marketplace. The alleged set covers 98,921 customers and 74,359 addresses, with names, phone numbers, emails, birth dates and delivery addresses. The company has not confirmed an incident; a sample was offered and price is available on request.

Why it matters

If the data is real, shoppers are exposed to personalized SMS phishing and fake delivery scams, since names, phone numbers and full addresses enable convincing attacks. The claim is unconfirmed, but abuse of the brand in scams can drive customer trust loss. Anyone buying on the marketplace could be in the alleged base.

What to do

Monitor underground forums for samples or confirmation of the leak and wait for an official statement from Ayan Market. Warn customers and staff about scams using the store's name. Ignore delivery or payment links sent by message.

For the technical team

Affected: Ayan Market, marketplace online do Cazaquistão; base alegada de clientes com 98.921 compradores e 74.359 endereços · Ayan Market, a Kazakh online marketplace; alleged customer base with 98,921 buyers and 74,359 addresses.
Exploitation: Alleged sale on an underground forum, reported by DailyDarkWeb; sample offered and price available on request. Unverified claim; Ayan Market has not confirmed an incident.
Fix: Not applicable (alleged data leak).
More details: Alleged fields: phone numbers in 93.6% of records, birth dates in 83.6%, first, last and middle names, emails, gender, loyalty-customer flags and full delivery addresses (city, street, house, apartment, floor). DailyDarkWeb assesses that the detailed field percentages suggest the actor has the dataset in hand. The source does not describe how the database was obtained.