Threat Actor Claims Dibcase Data Breach, Exposes 4 Million Client Records

A threat actor has claimed responsibility for leaking the database of Dibcase, a cloud-based software platform specifically designed for Social Security practitioners, attorneys, and disability advocates. The alleged breach, which occurred in September 2024, includes over 4 million rows of sensitive data from Dibcase.

The leaked data includes detailed client notes, as evidenced by the structure shared by the threat actor:

• NOTE_ID
• Client References
• Note Texts and Dates
• Billing Information
• Invoice Details
• Responsible Parties

The data breach was reportedly carried out by a threat actor going by the name “Chucky.” The threat actor has shared the database structure and claims that sensitive information has been exposed, affecting numerous legal practitioners and their clients.