A threat actor has claimed responsibility for a significant data breach impacting a Syrian IPTV (Internet Protocol Television) provider. The targeted company, operating under the web domain iptv.sy, is a service that delivers television content over the internet to subscribers. The attack has allegedly resulted in the compromise of a database containing sensitive information belonging to more than 55,000 customers and resellers.
The cybercriminal group announced the breach on a dark web forum, putting the extensive collection of data up for sale. The leaked records, which are being offered in various file formats including CSV, PDF, and XLSX, allegedly contain a wide range of personally identifiable and financial information. This incident could expose affected individuals to various risks, including identity theft, phishing attacks, and financial fraud.
The allegedly exfiltrated data includes the following:
- Company Name
- Username
- Full Name (Arabic and English)
- Phone Number
- Protv Mobile Number
- Balance and Invoices
- Subscription Details (Start Date, Expiry Date, Offer Name, Current Package Name)
- IP Address
- Financial data including Port Fees, Taxes, and ISP Share