ScrapMarket.in, an Indian B2B platform facilitating the buying and selling of scrap materials, has allegedly been compromised by an unauthorized party. A database containing approximately 129,659 lines of user data has been listed for sale on a cybercrime forum. The breach, dated November 30, 2025, appears to affect a significant portion of the platform’s user base, including individual sellers and scrap dealers.
According to the samples provided in the leak, the compromised database contains sensitive user information. The allegedly compromised data includes:
-
Full names
-
Email addresses
-
Mobile numbers
-
Hashed passwords
-
Company names
-
User addresses
-
Subscription details (expiry dates and status)
-
Device IDs and Firebase tokens
