Actor Claims Explorest User Dataset of 263,900 Accounts for Sale
Summary
An actor using the handle “888” claims to offer Explorest data for a one-time XMR payment, including account and device details for 263,900 users. The dataset, its source and the claimed scope remain unverified.
Key points
- The actor claims the dataset covers 263,900 users and data from 2017–2026.
- Alleged fields include names, email addresses, countries, device tokens, profile details and password-field values.
- The listing claims direct app accounts have MD5-hashed passwords; social-login accounts have eight-character strings in the password field.
- The dataset is advertised for a one-time sale with payment requested in XMR.
- The report says the dataset, its source, scope and password details have not been independently verified; the acquisition method is unknown.
- If authentic, the information could raise credential-related risks and enable targeted phishing or impersonation.
Article Details
- Victim Organization
- Explorest
- Incident Type
- Claimed user-account data breach and dataset sale; unauthorized access has not been established.
- Disclosure Date
- 2026-10-02
- Data Types Exposed
- Names
- Email addresses
- Password fields, allegedly containing MD5 hashes for direct app registrations
- Eight-character password-field strings allegedly associated with social sign-in accounts
- Countries
- Device tokens
- Profile identifiers
- Account metadata
- Social-login related fields
- Affected Records
- 263,900 unique users claimed; not independently verified.
- Affected Data Size
- Not disclosed
- Operational Impact
- Not disclosed
- Ransom Or Extortion
- The actor advertises a one-time dataset sale with payment in XMR only. No ransom demand or extortion against Explorest is reported.
- Claim Status
- claimed