A significant data breach has allegedly hit Dtunes.ng, a Nigerian platform where users trade gift cards and cryptocurrency for cash. A threat actor posted on a dark web forum claiming to have gained access to and be selling the entire user database of the financial technology company. This alleged incident puts the sensitive information of the platform’s customers at considerable risk.
The cybercriminal provided a sample of the data to prove their claim, which suggests a major compromise of user privacy. The sale of the full database could lead to a wave of phishing attacks, identity theft, and other malicious activities targeting Dtunes.ng users. The data allegedly leaked includes:
- User IDs
- Usernames
- Email Addresses
- Registration dates and times
The threat actor is demanding payment exclusively in Monero (XMR), a cryptocurrency known for its privacy features, and is using an escrow service to facilitate the sale. This incident underscores the persistent threats facing the digital currency exchange industry, where platforms are frequent targets for cyberattacks due to the valuable financial and personal data they hold.