Threat Intelligence

Dark Web Roundup: Alleged Leaks Target a Thai Food Firm, Belgian Military and China's Housing Fund

SOCRadar · 2 Nov 2026
Key Takeaway Even when dark web leak claims are unverified, treat them as a prompt to check which of your suppliers and partners could be affected, and warn staff to expect convincing phishing that uses leaked personal details.

SOCRadar's Dark Web Team has flagged several underground posts that claim to expose or sell stolen data. All of these claims are unverified, and the authenticity of each dataset and the extent of any compromise remain unconfirmed. The source also mentions claimed DDoS attacks by a group called Anka Team and an alleged sale of Super Administrator access to Vijay Sales' internal systems, though the opening of the article gives no further detail on those.

In the first case, an actor using the alias Z_Union allegedly shared a BitTorrent magnet link and password for a 500GB dataset said to belong to Pataya Food Industries, a Thai food manufacturer and supplier. The contents have not been disclosed, but could include corporate information, internal documents or business records. Separately, a seller using the alias th3sevenflow is advertising an alleged Belgian military archive of more than 2,700 files dated 2011 to 2026. It reportedly includes personnel and administrative records, psychosocial risk assessments, infrastructure and safety documents, and union-related files.

The largest claim involves 25,417,090 records allegedly from China's Housing Provident Fund, posted by an actor called Blastoize. The actor says the data came from a larger 2024 breach of about 76.9 million records. The archive reportedly holds names, national identification numbers, mobile phone numbers and company names. If genuine, it could fuel identity theft, targeted phishing and social engineering against the people listed.

Summarised by CISO AI from SOCRadar, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.