Dark Web

Employees suing a fast food chain over a data breach will have their case heard in North Carolina business court after being dismissed in federal court. The lawsuit alleges Russian hackers accessed over 387,000 files of employees' information and shared them on the dark web.

India is investigating a Tata data leak that exposed Apple iPhone secrets. Tata has hired a global consultant to conduct a forensic audit after documents from Tesla, Qualcomm, and TSMC were also posted on the dark web.

A ransomware leak on the dark web exposed hundreds of component-to-supplier mappings for an unreleased iPhone 18 Pro model, revealing Apple's supply chain secrets from an Indian supplier. The breach threatens Apple's protected supply chain relationships.

The dark web hosts both legitimate privacy tools and a thriving criminal ecosystem, including underground forums, marketplaces for stolen data, and scams. Cybercriminals operate globally through platforms like WWH, Dark Forums, and BreachForums, while link boards help users navigate the network.

Two men, Michael Chase of Brooklyn and Jose Colon of Orlando, Florida, have been indicted for allegedly selling drugs on the dark web using cryptocurrency between January 2023 and March 2026, according to Manhattan District Attorney Alvin L. Bragg Jr.

A user's girlfriend received a scam call from someone claiming to be her bank, who requested her PIN and personal information. The scammer later admitted obtaining details from the 'dark web' and lives nearby, prompting account freezing. The user seeks advice on next steps and the legitimacy of the caller's number.

Hackers breached the Capital Development Authority's (CDA) property and water billing system, demanding a Bitcoin ransom and threatening to leak data on the dark web. The CDA, along with its vendor NRTC and IT Department, is working to restore systems, while online payment links remain inaccessible, affecting tax payments.

The article discusses risks of personal information being on the dark web due to data breaches and advises solutions like using unique passwords, multifactor authentication (MFA), credit freezes, and securing phone lines to prevent identity theft. It emphasizes that while exposure is common, proactive measures can mitigate harm from automated password attacks and SIM-swapping.

The bankruptcy admin approved a $47 million settlement for victims of a data breach at 23andMe, where approximately 7 million customers had their data stolen starting in April 2023. Much of the stolen information was later posted on the dark web.

An ATF special agent testified that investigators found software on Jonathan Rinderknecht's phone linking him to the dark web during a federal arson trial. The testimony is part of the prosecution's case against Rinderknecht in the Lachman Fire trial.

Tommy Spaulding, a 42-year-old Chicago resident, was sentenced to nine years in federal prison for selling drugs on the dark web after pleading guilty to conspiracy and drug trafficking offenses in July 2025.

A California man was sentenced to more than 26 years in federal prison for trafficking fentanyl and methamphetamine through Nemesis Market, one of the world's largest dark web marketplaces.

Darren Hughes was sentenced to over 26 years in prison for distributing narcotics via the dark web through his vendor store on Nemesis Market, a major dark web marketplace.

California's attorney general's office sued 23andMe for data protection failures leading to a 2023 breach that exposed sensitive genetic data. The lawsuit alleges the company failed to secure customer data and misled consumers about the breach's severity, with compromised information sold on the dark web during a period of rising hate crimes.

California AG Rob Bonta has sued 23andMe over a 2023 data breach that led to the sale of 7 million users' data on the dark web.

California’s attorney general sued Chrome Holding Co. (formerly 23andMe) for failing to protect user data in a 2023 breach affecting 7 million people. The breach, using credential stuffing from a 2017 MyHeritage data leak, allowed attackers to access 14,000 accounts and steal genetic data, health reports, and relative information, which was later sold on the dark web. The lawsuit seeks penalties and injunctions against the company for violating privacy laws.

A TikTok star and her father have been charged with plotting to murder Jack Avery, a boy band singer and father of the woman's daughter. The alleged plot involved using bitcoin, the dark web, and coded messages to arrange the killing.

A TikTok influencer is accused of conspiring with her lawyer father to recruit a hitman from the dark web to kill her ex-boyfriend, a boy band singer. The influencer and her father allegedly sought to have the singer murdered. The case involves allegations of murder-for-hire and conspiracy.

A TikTok influencer is accused of conspiring with their lawyer father to recruit a hitman from the dark web to kill a boy band singer ex. The influencer and their father allegedly sought to have the ex killed. The plot was uncovered, leading to accusations against the influencer and their father.

A man from London was jailed for six years for running paedophile dark web forums and possessing 87,000 pictures of children on his computers. He operated these illegal activities from his London flat. The case highlights the severity of online child abuse crimes.

Checkmarx confirmed that data from its GitHub repository was posted on the dark web following a supply chain attack on March 23, 2026. The company attributes the breach to a cybercriminal group exploiting the initial attack to access sensitive repository data.

The California Attorney General charged 21 individuals in a $267 million Medi-Cal hospice fraud ring, which used stolen identities from data breaches to enroll fake patients in shell hospice companies. Scammers billed the state for non-existent care, exploiting Medi-Cal through Covered California, with over $3.5 billion in estimated hospice fraud in Los Angeles County alone.

Eurail, which sells Interrail passes, disclosed that personal data of 300,000 travelers—including passport numbers, names, and addresses—was hacked in December and later offered for sale on the dark web. A sample dataset was published on Telegram, prompting travelers to cancel passports and replace them due to security risks.

Eurail, the company behind Interrail passes, disclosed that data from a December breach affecting 300,000 travelers has been offered for sale on the dark web. Stolen personal information includes passport numbers, addresses, and contact details, prompting travelers to cancel and replace passports.

California authorities have charged 21 individuals with orchestrating a $267m hospice fraud scheme, using stolen identities to fraudulently bill Medi-Cal. The suspects allegedly purchased personal data from the dark web to enroll non-residents in the state's health program, leading to criminal charges filed by Attorney General Rob Bonta.

The webinar focuses on identifying threat actor intentions through dark web activity and credential requests. It aims to teach proactive defense strategies by converting early warning signs into actionable security measures. Flare Systems is hosting the event to address emerging cybersecurity threats.

Operation Grayskull, a joint effort between the Department of Justice and FBI, successfully dismantled four dark web sites dedicated to child sexual abuse material (CSAM). The operation resulted in lengthy sentences for the managers of these illegal sites. This law enforcement action represents a significant victory in combating child exploitation online.