2026 Kaya (Iran) — DaOnlySpark claim; ~1.7M records / 50.6k accounts (unverified)
Data compromised
Actor claim (unverified): 1.14 GB / 1,697,095 records across 87 collections; 50,649 user accounts; private chats; identity-verification (national IDs/docs); financial/IBAN data; bcrypt password hashes; linked Freelancer.com account refs. Does not establish Freelancer.com compromise. Company confirmation not located.
Technical writeup
Unverified actor/leak claim — Dark Web Informer (24 Sep 2026): “DaOnlySpark” claims breach of Iranian freelancing platform Kaya (kaya.ir) with 1.14 GB / 1,697,095 records / 50,649 accounts including chats, national ID verification, bank/IBAN data, and bcrypt hashes. DWI has not verified authenticity; listing’s Freelancer.com account links do not prove Freelancer.com was breached. recordsAffected 1697095 (actor total-record claim, not unique people); companyConfirmed false.
Root cause
Unverified forum dump claim by actor “DaOnlySpark” against Iranian freelancing platform Kaya (kaya.ir) — Dark Web Informer Sep 24, 2026