[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f08FUXxFV2AbHRikK_abo5b5GWKPh16wh-y6jEOhTbFg":3},{"article":4,"iocs":54,"watch_terms":73},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":33,"category":34,"article_tags":38},"ca22dec0-6e7d-4fe7-803f-b55812687e90","Daily Dose of Dark Web Informer - April 20th, 2026","daily-dose-of-dark-web-informer-april-20th-2026-45ae1b","This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X\u002FTwitter posts.","This daily threat intelligence digest aggregates recent dark web activity, including major data breaches affecting Nigerian bankers, Egyptian investors, Mexican emergency services, Israeli security institute, and Malaysian Agoda users. The report also documents ransomware claims against financial institutions and healthcare providers, plus the guilty plea of a Scattered Spider member involved in wire fraud and identity theft.","Daily dark web threat digest reports multiple breaches, ransomware claims, and law enforcement actions across global","Dark Web Informer — Daily Threat Intelligence Digest 🔑 API Access Available High-volume threat intelligence, ransomware data, IOC exports, and comprehensive feed access for security teams and researchers. Explore API → 🔁 Follow across all official platforms — darkwebinformer.com\u002Fsocials 🔥 Advertising Opportunities Reach a highly engaged audience of 75,300+ unique users monthly and growing. View details 75.3k Unique Visitors 154.1k Pageviews Last 30 days as of Mar 30, 2026. Next update Apr 30th. 🔒 Unlock Premium Intelligence Real-time breach tracking, expert analysis, high-resolution evidence, unredacted feeds, and 5,100+ blog posts. View all plans and features on the pricing page. View Plans & Subscribe → 📌 Legend 📰Law Enforcement — LEA updates, investigations ⚠️Dark Web Notices — forums, markets, announcements ❗️Urgent Threats — breaches, ransomware, vulnerabilities 💡Insights & Tools — guides, OSINT, learning resources 🔒Subscribers Only — X\u002FTwitter subscribe 🧾 Today's Intelligence Threat Intelligence ❗️ Chartered Institute of Bankers of Nigeria (CIBN) Database Breached: 250GB Including Member PII, Source Code, and ID Documents Leaked FREE ❗️ Taiseer (taiseer.co) Database Breached: Threat Actor Sorb Offering PII of Egyptian Gold Investors for Sale FREE X\u002FTwitter Updates ❗️ SSEDOMEX (Secretaría de Seguridad del Estado de México), the public security ministry of Mexico's most populous state, has allegedly had a decade of 911 and 089 emergency call records put up for sale on a popular cybercrime forum at $1,200 USD. ❗️ Emaar Properties and Select Group, two major Dubai based real estate developers, have allegedly had owner and rental information from their servers put up for sale on a popular cybercrime forum at $8,000 USD for both datasets combined. ❗️ INSS (Institute for National Security Studies), Israel's leading national security think tank, affiliated with Tel Aviv University, has allegedly suffered an unauthorized access of its internal research environment, with a claimed 15.92 TB archive put up for sale on a ❗️ Agoda (http:\u002F\u002Fagoda.com), a Booking Holdings owned travel platform, has allegedly had 82 million customer records associated with Malaysian users put up for sale on a popular cybercrime forum. ❗️ The Gobernación del Valle del Cauca (Colombia), specifically the SAR (Sistema Administrador de Recaudo Departamental) server at http:\u002F\u002Fserveriissar.valledelcauca.gov.co, has allegedly suffered an unauthorized access, with the data put up for sale on a popular cybercrime forum at $500 USD. ❗️ Vercel Breach Traced to Suspected February Infostealer Infection at Context.ai ❗️ A threat actor identified as SCTH is allegedly selling a database purportedly belonging to SGK Türkiye (Turkish Social Security Institution) containing over 20 million records. ❗️ Lovable has allegedly been breached, all the details. ❗️ Scattered Spider member, Tyler Robert Buchanan, 24, of Dundee, Scotland, pleaded guilty to one count of conspiracy to commit wire fraud and one count of aggravated identity theft. ❗️ Citizens Bank has been claimed a victim to Everest Ransomware ❗️ Frost Bank has been claimed a victim to Everest Ransomware ❗️ Cooperativa de Hospitales de Antioquia - COHAN has been claimed a victim to Qilin Ransomware ❗️ Qilin Ransomware Claims 4 companies below as victims: 💡 BlueSky's Status page has been suspended by UptimeRobot.","https:\u002F\u002Fdarkwebinformer.com\u002Fdaily-dose-of-dark-web-informer-april-20th-2026\u002F","https:\u002F\u002Fstorage.ghost.io\u002Fc\u002F6b\u002F16\u002F6b16ac9c-cd67-432f-b0f3-bbec941084ff\u002Fcontent\u002Fimages\u002Fsize\u002Fw1200\u002F2026\u002F02\u002F23597862398746923879872364987342598723.png","2026-04-20T21:40:24+00:00","2026-04-20T22:00:13.057+00:00",8,[18,21,23,25,28,30],{"name":19,"type":20},"Scattered Spider","threat_actor",{"name":22,"type":20},"Sorb",{"name":24,"type":20},"SCTH",{"name":26,"type":27},"Agoda","vendor",{"name":29,"type":27},"Vercel",{"name":31,"type":32},"Context.ai","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":33,"icon":35,"name":36,"slug":37},null,"Threat Intelligence","threat-intelligence",[39,44,49],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",[55,59,63,66,70],{"type":56,"value":57,"context":58},"domain","taiseer.co","Breached Egyptian gold investor platform with PII leaked by threat actor Sorb",{"type":60,"value":61,"context":62},"url","http:\u002F\u002Fserveriissar.valledelcauca.gov.co","Compromised Colombian SAR server allegedly sold on cybercrime forum for $500 USD",{"type":60,"value":64,"context":65},"http:\u002F\u002Fagoda.com","Booking Holdings travel platform; 82 million Malaysian customer records allegedly breached",{"type":67,"value":68,"context":69},"malware","Everest Ransomware","Claims against Citizens Bank and Frost Bank",{"type":67,"value":71,"context":72},"Qilin Ransomware","Claims against COHAN (Colombian hospital cooperative) and 3 additional victims",[26,29,31]]