Dark Web Listing Claims MedCred Dataset Includes Details on 274,534 Users
Summary
A dark web actor claims to offer a MedCred dataset containing names, email addresses and location details for 274,534 users. The dataset, its source and the alleged December 2024 breach have not been independently verified.
Key points
- An actor using the handle "replaceboundless" claims to have uploaded the dataset for download.
- The listing claims the data includes names, email addresses, city, county, postal code and state.
- The alleged breach is dated to December 2024; the claimed user count and dataset contents are unverified.
- The supplied screenshot shows listing metadata, but no underlying sample records.
- If authentic, the contact and location details could enable targeted phishing, impersonation or social engineering.
Article Details
- Event Type
- Unverified data-breach claim and dataset listing
- Impact
- If authentic, the dataset could expose names, email addresses and geographic details of 274,534 MedCred users, potentially enabling targeted phishing, impersonation and social engineering.