Webull Singapore: Seller claims leak of 2…

CriticalBreachNo software to update

In 30 seconds

Alleged

A dark-web seller allegedly claims to possess more than 2 million recent records attributed to Webull Singapore. The claim remains unverified, and the available report says Webull has not confirmed an incident.

What happened

Alleged

DailyDarkWeb reported that a forum seller was advertising what it described as “fresh 2026” Webull Singapore data containing first and last names, email addresses and mobile phone numbers. No evidence of how the information was obtained was provided in the post.

Why it matters

Inferred

If the contact information is authentic, it could make phishing texts, fraudulent calls and account-takeover attempts more convincing. That risk does not establish that Webull was breached or that the advertised records came from its systems.

What to do

Inferred

Webull Singapore users should treat unexpected messages about investments, withdrawals or account verification with caution. Avoid opening unsolicited links, verify requests through the official app or website, and contact the mobile carrier promptly if a phone unexpectedly loses service, which can be a warning sign of a SIM-swap attempt.

Confirmed and still uncertain

Observed

The observed evidence is limited to a DailyDarkWeb post documenting the seller’s claim and its own assessment. The dataset’s authenticity, ownership, collection method, number of unique people, connection to Webull and alleged 2026 recency remain unknown.

What people are saying

Inferred

DailyDarkWeb labels the claim unverified and says the posted sample contains mostly free webmail accounts plus some non-Singapore addresses. Its analyst suggests those features fit a relabelled or aggregated contact list better than a broker’s customer database, but that is an assessment rather than confirmation.

Evolution

Observed

The only supplied snapshot is the report of the seller’s advertisement. No subsequent company statement, independent validation, victim notification or technical investigation is included, so the evidence does not show that the claim progressed beyond an unverified listing.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Observed

The advertised fields are basic identity and contact data: names, email addresses and mobile numbers. The report provides no intrusion method, system logs, database structure, account credentials, financial details or other technical evidence tying the material to Webull infrastructure.

Sources and evidence

Observed

The evidence set contains one X post from DailyDarkWeb, including an attached image, that summarizes a dark-web seller’s advertisement and explicitly describes it as unverified. With no primary forum record, dataset examination, company response or independent corroboration supplied, attribution to Webull Singapore cannot be confirmed.