A threat actor has allegedly released a database belonging to GeoHealth Research, a scientific platform dedicated to the intersection of geography and health. The organization appears to be managed by the KHEOBS Laboratory, a collaborative research initiative between the Institute of Technology of Cambodia (ITC) and the French National Research Institute for Sustainable Development (IRD).
The leak was publicized on DarkForums, a known illicit marketplace, where the actor shared a SQL dump file claiming to contain the organization’s data. The actor did not provide a specific motive but encouraged other users to download the data to boost their forum reputation.
According to the actor and the provided SQL dump samples, the compromised data appears to stem from the website’s WordPress database. The allegedly compromised data includes:
-
Usernames and Comment Author Names
-
Email addresses associated with comments
-
IP addresses of users who interacted with the site
-
Full content of user comments and discussions
-
Timestamps and metadata associated with site activity
