2026 Serbia RFZO — bytetobreach ~5M individuals claim across mirrored databases (unverified)
Data compromised
Advertised (unverified): multiple RFZO databases; largest table ~8M rows; poster estimates ~5M unique individuals after dedupe/corruption; field list not published in thread
Technical writeup
Unverified mirrored-database claim — August 17, 2026 (Dark Web Informer). Forum user bytetobreach claims to hold databases belonging to RFZO (Republic Fund for Health Insurance of Serbia) and posted links across five mainstream file-hosting mirrors. Poster cites largest tables near eight million rows and estimates roughly five million individuals after duplicates and corrupted records — approaching Serbia’s insured population — but provides no schema, field list, or record samples in the thread. Post states RFZO was notified directly, no ransom was demanded, and data would not be given to unknown parties (thread also tagged as selling — internally inconsistent per DWI). RFZO had not publicly addressed the claim at indexing. recordsAffected 5000000 reflects the actor’s deduplicated individual estimate only (unverified).
Root cause
Unverified forum distribution claim — actor bytetobreach posted RFZO database mirrors on five file hosts (~Aug 17, 2026); RFZO had not confirmed at indexing