Ministério do Interior do Camboja · Breach

Actor claims to sell data of 1,498 Cambodian Interior Ministry officers

Oct 27, 2026 · 1 min read

A threat actor on an underground forum claims to be selling data stolen from Cambodia's Ministry of Interior (interior.gov.kh), according to Daily Dark Web. The alleged material includes HR records for 1,498 officers, 395 system accounts with password hashes, and 3,912 attached documents such as national IDs and certificates. The claim has not been independently verified and the ministry has not commented publicly.

By HIFY Radar newsroom Updated 10/27/2026 09:11 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to be selling data stolen from Cambodia's Ministry of Interior, according to the Daily Dark Web account. The alleged package includes personnel records for 1,498 officers, family details and thousands of identity documents. The claim is unconfirmed and the ministry has not commented publicly.

Why it matters

If genuine, the leak exposes identities, addresses and family ties of Cambodian police and administration officers, with risks of identity fraud, impersonation and coercion. Data on 395 system accounts, including administrator roles, could enable follow-on access to ministry systems.

What to do

Treat this as an unconfirmed claim. Monitor forums and leak channels for confirmation or publication of the data, review access logs and enforce two-factor authentication on the cited administrative accounts.

For the technical team

Affected: Ministério do Interior do Camboja (interior.gov.kh), órgão responsável pela administração pública, polícia nacional, seg · Cambodia's Ministry of Interior (interior.gov.kh); the ministry's Sport Council system. The ministry handles public administration, national police, public security and immigration.
Exploitation: No technical exploitation reported. Data sale claimed by an unnamed threat actor on an underground forum, reported by Daily Dark Web on Oct 28, 2026; claim not independently verified.
Fix: No fix applicable; alleged data breach with no specific vulnerability identified in the sources.
Vector: Unknown access method; the source does not describe how the data was allegedly obtained. The listing mentions seven backups (Oct 21-26, 2026) of the ministry's Sport Council system, two allegedly with full Laravel source code and MySQL dumps.
More details: Alleged dataset details: HR records for 1,498 officers (names in Khmer and English, dates of birth, national ID numbers, blood types, phones, emails, home addresses); officer IDs, ranks, positions, rank histories and full family details (parents and spouses); 395 system user accounts with usernames, argon2id password hashes and roles (admin, primary, subnational); 3,912 attached documents including appointment decrees, birth certificates, family books, marriage certificates and national IDs. The Daily Dark Web source is subscriber-only.