Actor Claims Defy Club Dataset Leak Affecting 23,149 Accounts

Summary
GoreTerminal claims to have leaked a Defy Club dataset with about 23,149 accounts, including phone numbers and email addresses. The listing and sample are described, but the dataset and breach claim remain unverified.
Key points
- The actor handle GoreTerminal claims the dataset contains approximately 23,149 user accounts.
- The listing claims 23K+ phone numbers and 9K+ email addresses, alongside account, device, carrier and network-related fields.
- The dataset is described as JSON Lines, with a 6.4 MB uncompressed file and an 805 KB compressed archive.
- Screenshots show the listing and sample records, but do not independently verify the data's authenticity, source or completeness.
- If authentic, the exposed contact and account information could enable targeted phishing, SMS abuse or impersonation.
Article Details
- Victim Organization
- Defy Club
- Victim Domain
- defy[.]club
- Incident Type
- Claimed data leak involving a dataset of user accounts; the breach and dataset have not been independently verified.
- Incident Date
- 2026-10-30
- Data Types Exposed
- Phone numbers
- Email addresses
- IP addresses
- Mobile-carrier information
- User and account identifiers
- Platform and device information
- Registration-region information
- Profile-created timestamps
- Affected Records
- Approximately 23,149 user accounts, as claimed; not independently verified.
- Affected Data Size
- The post describes a 6.4 MB uncompressed JSON Lines file and an 805 KB compressed archive; not independently verified.
- Operational Impact
- No operational disruption is reported. If authentic, the dataset could expose contact, account, device, and network-related information; the article describes possible misuse but reports no confirmed impact.
- Ransom Or Extortion
- The post characterizes the release as a free leak rather than a ransom event. No ransom demand is reported.
- Claim Status
- claimed
