Actor brownbull01 alleges leak and sells Taly customer data
Taly, a Kuwaiti buy now, pay later service, was named in a sale listing by actor brownbull01, with a sample showing customer names, emails, Kuwaiti phone numbers, and detailed residential addresses. The seller claims the data comes from a 2026 breach and is offering it to buyers; the source remains unverified and no record count was disclosed. Customers in Kuwait should watch for phishing and fraud attempts.
What happened
An actor named brownbull01 published a sample and put alleged Taly customer data up for sale; Taly is a Kuwaiti buy now, pay later service. The sample includes names, emails, Kuwaiti phone numbers, and detailed residential addresses, down to building block, floor, and apartment number. The seller claims the data comes from a 2026 breach; the source remains unverified.
Why it matters
Precise residential addresses combined with names, emails, and phone numbers raise the risk of targeted phishing, fraud, and physical threats to customers. For Taly, the public sale may damage trust among consumers and partners. No total record count was disclosed, so the scale of the damage is unknown.
What to do
Monitor new posts by actor brownbull01 and await an official statement from Taly. Anyone using Taly in Kuwait should change the password of the registered email and be wary of contacts citing their address or personal details. Companies with employees who are Taly customers should warn them about phishing attempts.
For the technical team
- Affected
- Taly (serviço kuwaitiano de compra agora, pague depois); dados de clientes · Taly (Kuwaiti buy now, pay later service); customer data exposed in the sample.
- Exploitation
- No vulnerability exploitation reported. Sale listing published by actor brownbull01 and reported by DarkWebInformer. No PoC and no KEV catalog entry.
- Fix
- No fix applicable; this is an alleged, company-unconfirmed data leak.
- Vector
- The source does not describe a vector. The seller only claims the data comes from a 2026 breach, with no details on method, component, or compromised system.
- More details
- Actor: brownbull01. Sample contains names, emails, Kuwaiti phone numbers, and addresses with neighborhood, street, building block, floor, and apartment number. Total record count not disclosed. Source unverified; the seller claims a 2026 breach. Single source: DarkWebInformer.
Timeline
Incident opened.
Sources 1 source
- @DarkWebInformer @DarkWebInformer
