[Single source] Alleged Shieldtag leak exposes data of over 100,000 users

The latest available report says an underground forum actor claims to have leaked a 26 GB Shieldtag database covering more than 100,000 users. The claim remains unverified, and the report says Shieldtag had not commented on the listing.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

DailyDarkWeb relayed a forum claim that a SQL database belonging to Shieldtag, an Indonesian product authentication company, had been leaked. The reported contents include personal details, credentials, account tokens and identifiers connected to partners, distributors, agents and manufacturers.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

If the database is authentic, the combination of identity details, password hashes and account tokens could support targeted phishing, password cracking and attempts to take over accounts. The potential harm is broader for anyone who reused the same password elsewhere.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Shieldtag users should treat unsolicited login and password reset messages cautiously, avoid entering credentials through links in unexpected messages and replace any password reused on other services with a unique one. Because exposure has not been confirmed, users should look for updates through Shieldtag's official channels rather than relying on the forum claim alone.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The public evidence establishes that DailyDarkWeb reported the allegation and explicitly labeled it unverified. It does not establish that the file is genuine, that it came from Shieldtag, that the listed tokens still work, which users are affected or whether anyone has misused the data.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

DailyDarkWeb says the claim should be treated as an unverified threat actor allegation, not a confirmed breach. Its analyst note warns that unsalted MD5 hashes can be cracked quickly and that exposed reset or Apple authorization tokens could create account takeover risk.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The reported chain begins with an underground forum actor allegedly posting a Shieldtag database. DailyDarkWeb then publicized the listing and its claimed contents, while noting that neither independent verification nor a Shieldtag response was available.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

1 independent groups, 1 updates, and 1 engagements.

The alleged fields include usernames, email addresses, names, gender, birth dates, phone numbers, occupations, profile pictures, MD5 password hashes, password reset tokens, Apple identifiers or authorization tokens, and business relationship IDs. If accurately described and still valid, several of those fields could be combined to make impersonation or account access attempts more convincing.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The evidence bundle contains one substantive public post from DailyDarkWeb and a subscription link without supporting body text. No Shieldtag statement, independently examined database sample, forensic report or second confirming source is included, so the underlying leak allegation remains uncorroborated.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list[2]x.comx.com · rssOpen original sourceSee in source list