Suposta base de clientes de uma grande… · Breach

[Single source] Claim: Seller offers 740 million records from Chinese platform

Nov 12, 2026 · 1 min read

A seller claims to offer 740 million customer records from a major Chinese e-commerce platform. DailyDarkWeb calls the claim unverified, although the sample rows appear internally consistent, and reports that the platform has not issued a statement. Monitor for a platform statement and validate any related data before acting.

By HIFY Radar newsroom Updated 11/12/2026 09:19 PM Get this every day →← Back to the feed 1 source

CriticalBreachNo software to update

In 30 seconds

Alleged

A dark-web seller allegedly offered 740 million customer records attributed to JD.com, but the only supplied evidence explicitly describes the claim as unverified. The posted samples reportedly look internally consistent, yet they do not confirm a breach or establish where the data originated.

What happened

Alleged

DailyDarkWeb reported that a forum seller was offering a single CSV file said to contain customer information from the Chinese e-commerce platform. The seller allegedly priced the dataset at a few hundred US dollars.

Why it matters

Inferred

If authentic, the combination of names, mobile numbers, addresses and purchase details could make impersonation and targeted phishing more convincing. That risk is conditional because the evidence does not verify the dataset or its claimed connection to JD.com.

What to do

Inferred

People concerned about possible exposure should treat unexpected delivery, refund and order messages cautiously, avoid opening unsolicited links, and verify requests through the retailer's official channels. These are precautionary steps inferred from the kinds of information allegedly offered, not evidence that any particular customer was affected.

Confirmed and still uncertain

Observed

The supplied evidence shows that DailyDarkWeb published the allegation and said sample rows appeared internally consistent. It does not independently establish authenticity, collection date, record uniqueness, the seller's identity, or whether the information came from JD.com, another source, or multiple previously circulating datasets.

What people are saying

Inferred

DailyDarkWeb cautioned that the listing was a threat-actor claim rather than confirmation of a breach. It also suggested that the unusually low asking price could indicate an old, resold or compiled dataset, but that explanation remains analytical speculation.

Evolution

Alleged

The reported chain begins with a seller allegedly posting the database on a dark-web forum. DailyDarkWeb then amplified the offer while adding two important qualifications: the samples only appeared consistent, and the claim had not been verified as a new breach.

Reach

Observed

1 independent groups, 1 updates, and 2 engagements.

Technical detail

Alleged

The listing allegedly describes one CSV file containing buyer IDs, full names, mobile numbers, delivery addresses, products, transaction amounts, refunds and tracking numbers. No file, schema, independent validation or forensic analysis is included in the supplied evidence.

Sources and evidence

Observed

This report rests on a single DailyDarkWeb post that summarizes a purported forum listing and includes an image. There is no independent technical report, direct forum material, company response or corroborating source in the supplied evidence, so the dataset and its attribution remain unconfirmed.