OMPFinex · Breach

Claim: actor offers 600K OMPFinex user records for sale

Nov 05, 2026 · 1 min read

A threat actor on a dark web forum is advertising data said to belong to about 600,000 users of OMPFinex, an Iranian cryptocurrency exchange. The claimed dataset includes full names, national identification numbers, phone numbers, dates of birth and home addresses; a shared sample looks consistent with exchange KYC records. The claim is unverified and OMPFinex has not commented; users should expect targeted phishing and fake support calls.

By HIFY Radar newsroom Updated 11/05/2026 06:37 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on a dark web forum claims to be selling data of about 600,000 users of OMPFinex, an Iranian cryptocurrency exchange. The claimed dataset includes full names, national identification numbers, phone numbers, dates of birth and home addresses. A sample shared with the listing looks consistent with exchange KYC records; the claim is unverified and OMPFinex has not commented.

Why it matters

If confirmed, highly sensitive personal data, including national IDs, of crypto exchange customers would be exposed. DailyDarkWeb notes that KYC data with national IDs is a ready-made kit for SIM-swap, account takeover and impersonation fraud, with users facing targeted phishing and fake support calls.

What to do

OMPFinex users should treat unsolicited contacts asking for data or codes as suspicious. Security teams should monitor for use of this data and prepare customer alerts. There is no product fix; the case awaits a response from the exchange.

For the technical team

Affected: OMPFinex, exchange centralizada de criptomoedas do Irã; base alegada de cerca de 600 mil usuários · OMPFinex, an Iranian centralized cryptocurrency exchange; claimed base of about 600,000 users.
Exploitation: Sale advertised on a dark web forum by a threat actor, reported by @DailyDarkWeb. Claim not independently verified; DailyDarkWeb stresses it is not confirmation of a breach.
Fix: Not applicable (alleged data leak).
More details: A sample shared with the listing looks consistent with exchange KYC records. Claimed data: full and paternal names, national identification numbers, phone numbers, dates of birth and home addresses. OMPFinex has not commented. DailyDarkWeb assesses that KYC data with national IDs enables SIM-swap, account takeover and impersonation fraud.