2026 MyDukaan — forum claim of ~100M user database sale (May 31)

On May 31, 2026, underground forum marketing alleged a full database dump from MyDukaan (mydukaan.io), an India-focused merchant storefront platform, offering roughly 100 million user records for sale—including names, emails, phones, password fields, addresses, orders, seller metadata, and encrypted payment API keys. The seller used the handle “stalker8083” and asked about $10,000. MyDukaan had not issued a public confirmation in indexed trade press at catalog time. BreachHistory notes this claim is distinct from earlier unrelated reporting about the separate “Dukaan” brand and a 2025 Kafka misconfiguration documented by Cybernews; treat the 100M figure as actor marketing until forensic validation.