Zeemart Data Breach: 510K+ Records Leaked From Singapore F&B Platform
Threat actor claims 510K+ records from Singapore F&B procurement platform Zeemart leaked on underground forum.
Summary
A threat actor using the alias '2019' claims to have leaked the database of Zeemart, a Singapore-based B2B procurement platform serving restaurants and food service businesses. The alleged breach exposed over 510,000 records including user names, email addresses, phone/WhatsApp numbers, company details, and order data. If verified, the dataset could be exploited for business email compromise, invoice fraud, phishing, and competitive intelligence targeting Singapore's F&B sector.
Full text
Data510K+ records PriceFree leak CountrySingapore Actor2019 ▣Post details TargetZeemart (B2B F&B procurement platform) CountrySingapore SectorB2B Procurement / SaaS ClaimPlatform database leaked (4 tables) Data510K+ records (users, companies, outlets, orders) ObservedJun 9, 2026 PriceFree leak Actor2019 (GOD user) !Allegedly exposed 510,000+ records (claimed) User names, titles & roles Email addresses Phone & WhatsApp numbers Company & outlet details Business addresses & postal codes Order data (amounts, GST, totals) Subscription & account metadata ◱Screenshot Screenshot 1 Redacted preview ⚠Potential impact If genuine, a B2B dataset of 510,000+ records linking named restaurant and supplier staff to emails, phone and WhatsApp numbers, company and outlet details, and order and financial data would be valuable for business email compromise (BEC), invoice fraud, phishing, and competitor intelligence across Singapore's food and beverage sector. The order amounts and supplier relationships make targeted fraud against specific businesses more convincing. Record counts and authenticity are unconfirmed. iStatus Unverified A column listing across four tables and sample records were posted to an underground forum, with a free download link; the sample records and download link are not reproduced here. The claim has not been independently confirmed and Zeemart has not publicly addressed it. Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing → DARK WEB INFORMER - THREAT INTELLIGENCE
Indicators of Compromise
- malware — 2019