2026 TikTok — 2.4B forum leak claim (unverified); infostealer repackaging suspected
Data compromised
Forum-claimed usernames, emails, phone numbers, dates of birth, and in some samples names, gender, language, and location fields; class action Mortazi v. TikTok (C.D. Cal.) alleges separate internal database compromise—disputed
Technical writeup
Unverified forum claim with litigation overlay — indexed June 11, 2026. Cybernews reported a forum actor advertising 2.4 billion TikTok user records with 10 published samples (emails, phones, DOBs, usernames). Researchers found no exclusive TikTok markers and assessed the corpus likely repackaged infostealer logs rather than a confirmed TikTok server breach; TikTok had not corroborated at catalog time. Separately, Mortazi v. TikTok Inc. (filed June 11, 2026, 2:26-cv-06371) alleges negligence over an internal database compromise exposing 2.4B+ users—legal allegations not yet attested by company notice. BreachHistory uses the forum-cited 2.4B headline count labeled unverified and notes infostealer-origin skepticism from Cybernews.
Root cause
Unverified hacker-forum advertisement of 2.4B TikTok user records—Cybernews researchers suspect infostealer log aggregation rather than direct TikTok database breach; TikTok had not confirmed at catalog time