2026 Haraki (onpay.my) — forum sale claim; customer/order data samples (unverified)
Data compromised
Actor-claimed samples include invoice numbers, customer names, emails, phones, addresses, payment amounts, bank information, payment dates, agent usernames, invoice PDFs, and shipping/tracking details—unverified
Technical writeup
Unverified criminal-forum claim — observed July 13, 2026. DailyDarkWeb reported a threat actor advertising for sale data allegedly obtained from Haraki (haraki.onpay.my), a Malaysia-based online learning platform for adult book-reading courses. Sample fields cited include customer contact details, postal addresses, payment amounts, bank information, invoice PDFs, and courier tracking numbers. Haraki had not issued a matching public breach confirmation at indexing time and no attested row count was available. BreachHistory indexes recordsAffected 0 labeled unverified.
Root cause
Unverified cybercrime-forum listing offering alleged Haraki online-learning customer and order data—platform operator had not confirmed at catalog time