A seller using the name TheHatman is offering employee directory exports from nine named enterprises. Hudson Rock ties the theft to infostealer credentials, not a compromise of the provider.
Perspective Coverage
5 publishers
- Builder
- Builder 25%
- Operator
- Operator 61%
- Investor
- Investor 14%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+30
- Incentives50
- Confidence60
Ransomnews says it found more than 50,000 exposed Stripe merchant secret keys and tested a sample. One live key to a customer list and a test charge took 17 hours.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+30
- Incentives
- Insufficient
- Confidence42
Researcher Dancho Danchev matched 205 handles from a 2005-2008 Exploit.in dump to private messages on five later forums, 26 of them from active early members. A matching handle does not prove a matching person, so 205 is a ceiling, but the forum's core was only about 90 accounts, few enough to follow from board to board.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence40
Ransomnews validated the sample as real The Town 2025 buyer data, down to the 487.50-real student ticket, but every row carries a single export timestamp that points away from Ticketmaster and at an unnamed partner.
Reality
- Evidence58
- Adoption22
- Hype gap−12
- Incentives70
- Confidence52
A forum seller wants $600 for what they say are 877,000 EV salary sacrifice driver records, and the 999-row sample published as proof holds up under structural testing in ways a fabricated file usually does not.
Reality
- Evidence58
- Adoption22
- Hype gap+20
- Incentives62
- Confidence55
A free 15.5 GB dump holds no passwords and no payment data, but every row carries Google Ad Manager cohort labels that chess.com's public API does not expose.
Reality
- Evidence58
- Adoption46
- Hype gap+12
- Incentives62
- Confidence52