Dark-Web Posts Claim Data Leaks Involving ZoomInfo, TryCircle, Vicente López, HDB Financial and X
Summary
SOCRadar reports underground posts claiming data exposures involving ZoomInfo, TryCircle, Vicente López, HDB Financial Services and X. The claims vary in age and detail, and their authenticity is unverified.
Key points
- A forum seller advertised a purported 185 million-record ZoomInfo dataset containing professional contact and company information; its authenticity and origin are unverified.
- An actor claimed to have leaked 557,052 TryCircle customer records, reportedly including contact details and delivery addresses; the breach has not been independently confirmed.
- An actor offered about 903,000 records allegedly belonging to Argentina’s Vicente López municipality, including personal and identification information.
- A circulating archive reportedly contains about 1.66 million HDB Financial Services customer records tied to a breach said to date to March 2023.
- Separate claims concerning X include an advertised 53 million-record dataset and an unverified claim of 200 million email-and-password combinations; the latter reportedly had no sample data.
Article Details
- Victim Organization
- Multiple: ZoomInfo, TryCircle, Municipalidad de Vicente López, HDB Financial Services, and X
- Incident Type
- Multiple alleged database sales, leaks, and exposure claims; none independently confirmed in the article
- Data Types Exposed
- Allegedly exposed professional and personal contact details, corporate information, and LinkedIn profiles associated with ZoomInfo
- Allegedly exposed customer names, phone numbers, email addresses, and delivery addresses associated with TryCircle
- Allegedly exposed personal and administrative records associated with Municipalidad de Vicente López
- Allegedly exposed customer personal, contact, geographic, and loan-related information associated with HDB Financial Services
- Allegedly exposed email addresses and profile information associated with X
- A separate unverified claim alleged email and password combinations associated with X
- Affected Records
- Reported claims: ZoomInfo, 185 million; TryCircle, 557,052; Municipalidad de Vicente López, approximately 903,000; HDB Financial Services, approximately 1.66 million; X, approximately 53 million in one listing. A separate X-related claim alleged 200 million email and password combinations.
- Affected Data Size
- The Municipalidad de Vicente López dataset was estimated at approximately 1 GB; the HDB Financial Services archive was listed at approximately 75 MB compressed.
- Operational Impact
- No operational disruption or confirmed compromise is reported. The article describes unverified claims and warns that, if authentic, the data could enable phishing, fraud, identity theft, credential stuffing, or account takeover.
- Ransom Or Extortion
- No ransom or extortion reported. The claims describe datasets offered for sale, shared, or offered for free.
- Claim Status
- claimed
Threat Actors
BlastoiseIdentified in the article as the actor distributing customer information allegedly belonging to HDB Financial Services; the data was described as relating to a historical incident.cantpwnIdentified in the article as the actor claiming to have published a database allegedly belonging to Municipalidad de Vicente López; the claim was not independently confirmed.sexyskinIdentified in the article as the actor claiming to have leaked TryCircle customer records; the alleged breach was not independently confirmed.
Products
Countries
Argentinaclaiming to release a database allegedly belonging to Municipalidad de Vicente López, a municipality in Argentina’s Buenos Aires Province. The actor, operating under the alias cantpwn, claimed to have publishedKuwaitSOCRadar Dark Web Team detected a post claiming a breach of TryCircle, an e-commerce platform operating in Kuwait. The threat actor, identified as sexyskin, claimed to have leaked a database containing 557,052 customerPeruadministrative registration details. The actor offered the database for free and indicated that systems in Peru could be targeted next. If genuine, the exposure could facilitate identity theft, fraud, and targeted
Industries
E-commerceSOCRadar Dark Web Team detected a post claiming a breach of TryCircle, an e-commerce platform operating in Kuwait. The threat actor, identified as sexyskin, claimed to have leaked a database containing 557,052 customerFinancial ServicesVicente López municipal database exposure. Other posts advertised a previously compromised HDB Financial Services dataset and an unverified X (Twitter) user database leak claim.