2023 Sanmina — forum sale listing claimed ~50k employee records and corporate PDFs; company silent in initial press (May)
Data compromised
Seller-claimed HR-style fields (names, mail, phones, titles) plus alleged credential/network documentation
Technical writeup
Cybernews reported that an underground seller advertised what they said was ~50,000 Sanmina employee records plus ~200 PDFs describing internal network diagrams and credentials, asking about $2,000, and that Cybernews could not independently verify the dataset. Digital Watch Observatory replayed the same claims with identical caveats. No contemporaneous 8-K-style corporate attestation was cited; treat numeric exposure as threat-actor marketing pending any later regulatory filing.
Root cause
Alleged external data theft offered on criminal markets (method unconfirmed in open sources reviewed)