Eurofiber Data Claims, BMW Employee Leak, and FortiWeb Exploit Surface Online

SOCRadar’s Dark Web Team this week flagged multiple high‑profile listings, including an alleged Eurofiber data sale tied to GLPI system records, a Fortinet CVE-2025-64446 exploit advertisement, and claimed leaks involving the Mexico City Auxiliary Police.

The post claims the Eurofiber dataset contains information for more than 10,000 clients and includes SSH private keys, FTP configurations, cloud setup files, JDBC URLs, credentials, certificates, source code, SQL backups and email files, with data dating back to 2015 and spiking around 2018–2019 after Eurofiber’s acquisition of Avenir Télématique. Also advertised are alleged documents from Alpek Polyester and alleged BMW India employee data on sale; the BMW India claim states 40,788 employee records were exposed.

The Fortinet exploit is described as being written in Go, tested on a real vulnerable target and capable of creating a new administrator account on FortiWeb devices, with an asking price of 200 USD. According to SOCRadar, the posts attribute the Eurofiber breach to GLPI vulnerabilities and warn of implications across industrial, governmental and technology sectors.