SOCRADAR’S Dark Web team flagged a string of alleged data incidents advertised across underground forums, including a purported 185 million-record ZoomInfo database sale, a claimed TryCircle customer data leak, and a supposed Vicente López municipal database exposure. Other posts advertised a previously compromised HDB Financial Services dataset and an unverified X (Twitter) user data dump claim.
In each case, the posts offer sample records or hashes to support the listings, but the article notes that authenticity and provenance—whether by scraping or unauthorised access—remain unverified.
The ZoomInfo claim outlines fields such as full names, business and personal emails, mobile numbers, job titles and LinkedIn profiles, plus company details and revenue bands. The TryCircle leak is said to include 557,052 customer records with names, phone numbers, emails and full delivery addresses, potentially increasing risk of phishing and social engineering in Kuwait.
The Vicente López exposure allegedly covers about 903,000 records, including personal identifiers and administrative data spanning 2015–2026, with the dataset described as roughly 1GB. The HDB Financial Services post claims about 1.66 million records dating to March 2023, and an X data dump claim cites 53 million records or 200 million email/password pairs.
The article stresses that none of these breaches have been independently confirmed, and cautions that, if real, the data could enable targeted fraud, phishing or credential-based attacks. SOCRadar’s guidance emphasises monitoring and verification, with no actionable remediation beyond maintaining vigilance and validating any exposed assets.