socradar.io 6/15/2026, 1:11:35 PM · external

Iran Hajj Organisation data leak exposes 168m records on dark web

Iran Hajj Organisation data leak exposes 168m records on dark web
CyberSIXT Evidence Panel Source marked as original reporting
Threat Actor

THE SOCRadar Dark Web Team reported several concerning developments concerning the sale of sensitive data. Key findings include:

1. **Iran's Hajj Organization Data**: A breach allegedly impacting 168 million records related to travel and personal details was listed for $80,000 in Bitcoin, posing risks of identity theft and financial fraud.

2. **Crypto User Leads for Sale**: A threat actor advertised extensive user data from platforms like Binance and Crypto.com, potentially facilitating phishing and impersonation attacks.

3. **APT43 Tool Claims**: A post claimed to offer backdoors and zero-day vulnerabilities linked to the North Korean group APT43, suggesting a high risk of system compromise if genuine.

4. **Swedish User Data from AdressFakta**: Over 5.4 million records purportedly from AdressFakta were offered for $3,800, which could enable social engineering schemes.

5. **Chrysler Breach Claim by Ransomware Group**: The Everest ransomware group claimed a breach involving 1TB of Salesforce-related data, risking targeted scams against affected customers.

View full article

Article by CyberSIXT