Threat Actor Sells Data Claimed Stolen From Dyson
A threat actor advertises two data packages, roughly 65 GB to 255 GB, claimed stolen from Dyson, on a dark web forum. The listing mentions credentials, bank and biometric data, emails, meeting recordings, legal dossiers, API keys and passkeys; the seller says some packages have already sold. Dyson has not confirmed an incident and the claim remains unverified.
What happened
A threat actor on a dark web forum is selling two data packages, roughly 65 GB to 255 GB, claimed stolen from Dyson. The listing includes employee and manager credentials, bank details, biometric data, emails, internal meeting recordings and legal and compliance dossiers. Dyson has not confirmed an incident.
Why it matters
If genuine, the data would put Dyson staff at risk of identity fraud and targeted phishing and could expose internal systems, according to the analysis accompanying the listing. The seller claims some packages have already sold. The company has not commented so far.
What to do
Monitor leaks and brand mentions, check internal systems for signs of unauthorized access and review use of the credentials and API keys cited. Treat the claim as unconfirmed until Dyson issues an official statement.
For the technical team
- Affected
- Dyson, fabricante britânica de tecnologia e eletrodomésticos; dois pacotes alegados de dados corporativos e de funcionár · Dyson; corporate and employee data allegedly stolen. No specific product or version cited.
- Exploitation
- Unverified. Attacker claim on a dark web forum, reported by DailyDarkWeb. The seller says some packages have already sold. Dyson has not confirmed an incident, according to the source.
- Fix
- Not applicable to a data leak; no fix cited in the sources.
- Vector
- Intrusion vector not described in the sources; the listing only advertises the sale of allegedly stolen data.
- More details
- Two packages, roughly 65 GB to 255 GB, according to the listing. Claimed contents: employee and manager credentials, bank details, personal IDs, biometric data, customer and employee emails, internal meeting recordings, legal and compliance dossiers, device clones with messaging data, plus API keys and passkeys. The analyst note with the post points to identity fraud risk, targeted phishing against staff and possible exposure of internal systems. No date, named group or country of origin cited.
Timeline
Sale of two data packages attributed to Dyson was advertised on a dark web forum, with no company confirmation.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
