☑️ Weekly Darkweb: October 2026, Week 4

🔍 Taiwan Insurance Bureau Database of 3.8 Million Records for Sale on Dark Web

• On October 28, a post offering a database containing personal information of Taiwan Insurance Bureau users was identified on the Chinese hacking forum 'Caybc.'

 ✓ Insurance Bureau (IB): The government agency under Taiwan's Executive Yuan responsible for licensing, supervision, inspection, regulation formulation, and consumer protection across all life and non-life insurance companies, insurance agencies, and brokers in Taiwan.

• The threat actor claimed that the database contains approximately 3.8 million personal records of Taiwanese nationals, offering it for sale at USD 1,380.

• As evidence of the breach, the user shared sample screenshots of a database query interface displaying names, mobile phone numbers, gender, dates of birth, addresses, email addresses, and national identification numbers.

🔍 Vietnam Ministry of National Defence Database for Sale on Dark Web

• On October 25, a post claiming to leak an internal database belonging to the Vietnam Ministry of National Defence was identified on the dark web hacking forum 'DarkForums.'

• The threat actor 'SCTH' claimed to have exfiltrated approximately 436,000 records, including defense procurement contracts, strategic communications logs, and personnel rosters.

• The threat actor stated their motive as "revenge for Indonesian citizens who fell victim to cyber scams based in Vietnam," releasing a sample download link containing 1,000 records and offering the complete database for sale at USD 5,000.

• According to S2W's user profiling tools, the threat actor has persistently targeted Vietnam, having previously posted approximately 80 million Vietnamese phone numbers for sale in April and internal data from Vietnam's Ministry of Public Security in September.

🔍 Bangladeshi Brokerage Firm 'P' Database and Source Code for Sale on Dark Web

• On October 26, a post offering internal data from Bangladeshi brokerage firm 'P' was identified on the dark web hacking forum 'Spear.'

✓ 'P': A securities brokerage subsidiary under Bangladeshi private commercial bank 'P,' headquartered in Dhaka. It provides brokerage services to retail and institutional clients and is a member of Bangladesh's two major exchanges.

• The threat actor 'bytetobreach' claimed to have breached Company 'P's primary cloud server via an SQL injection attack exploiting web application vulnerabilities, exfiltrating the complete database, source code, and Know Your Customer (KYC) documents.

• As evidence of the breach, the user posted five screenshots—including file lists, sample files, and database lookup screens containing customer personal information—along with six download links, providing contact details via Tox, Telegram, and email for purchase inquiries.