2026 Foodpapa.pk — ~239k users/drivers/admins (forum dump alleged)
Data compromised
CNIC, addresses, phones, emails, password hashes, tokens per OSINT summaries
Technical writeup
OSINT reporting in April 2026 described a dark-web forum upload allegedly sourced from a January 2026 backup of Foodpapa.pk, with summaries citing on the order of 239,109 rows across customers, delivery drivers, and a small admin set, and fields such as CNICs, addresses, phone numbers, email, bcrypt password hashes, and tokens. No official Foodpapa or Pakistan regulator filing was cited in the same secondary summaries; treat as alleged pending vendor confirmation.
Root cause
Alleged backup/database leak (unverified)