[ For GroupLink (TOR), you need to change BAWANG with ONION, example: https://tegbmnhkbpqz637f2yd.bawang >> https://tegbmnhkbpqz637f2yd.onion ]
| Country | Discovered | Published | Group Name | Victim | Source | Description |
|---|---|---|---|---|---|---|
| MM | 2026-09-06 | 2026-09-06 | DYSPHOR1A Google | Research | RTAD GOV MM About Victim | Road Transport Administration Department (RTAD) — official government portal providing public transport services, driving license issuance, vehicle registration, and safety regulations. Full databases dump total 1.08 GB. Victim domain https://rtad.gov.mm. | |
| MM | 2026-09-05 | 2026-09-05 | DYSPHOR1A Google | Research | CITIZENSPAY About Victim | Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information — total data size 30 GB. Price range $7,000 to $25,000. Victim domain https://ctzpay.com. | |
| MM | 2026-09-04 | 2026-09-04 | DYSPHOR1A Google | Research | MBT TELECOM About Victim | Myanmar Broadband Telecom Co., Ltd. (MBT) is a leading fiber internet service provider and telecommunications network solutions company established in Myanmar in 2013. Full database compromise exposing 209,970 user records including PII, passwords, and device information. | |
| FR | 2026-08-23 | 2026-08-23 | DYSPHOR1A Google | Research | NETIM COMPANY About Victim | Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems — source code, infrastructure IPs, payment processing databases, customer PII, and internal business data. | |
| MM | 2026-08-21 | 2026-08-21 | DYSPHOR1A Google | Research | YOMA FLEET About Victim | Yoma Fleet is a leading vehicle operating lease, rental, and financing company based in Yangon, Myanmar. The platform provides centralized administration and management for vehicle orders, employee financing, repayments, users, and employee records. Admin account access — need to contact on Telegram. | |
| IN | 2026-08-20 | 2026-08-20 | DYSPHOR1A Google | Research | THE UNIVERSITY OF DELHI (DU) About Victim | The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral programs across subjects like science, arts, commerce, law, and technology. | |
| TH | 2026-08-20 | 2026-08-20 | DYSPHOR1A Google | Research | AYUDHYA TH INSURANCE About Victim | Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used within the financial/transaction batch-processing ecosystem behind the Allianz customer-facing web platform. Includes admin credentials (TBH2CASH:AAbb1234). | |
| TH | 2026-08-20 | 2026-08-20 | DYSPHOR1A Google | Research | GUSTO COLLEGE GLMS About Victim | Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com. | |
| ID | 2026-08-20 | 2026-08-20 | DYSPHOR1A Google | Research | INDONESIAN POLICE DATABASE About Victim | Database containing records of 52,000 Indonesian police officers including email addresses, phone numbers, first and last names, passwords, location details, and 4,000 facial photographs. | |
| MM | 2026-08-20 | 2026-08-20 | DYSPHOR1A Google | Research | JOB NET .COM.MM About Victim | Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data. | |
| MM | 2026-08-20 | 2026-08-20 | DYSPHOR1A Google | Research | STRATEGY FIRST INTERNATIONAL COLLEGE About Victim | Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data. |