Dark Web Informer :verified_paw: on Nostr: 🚨🇹🇼 PopChill allegedly breached, data on 435,000 users exposed PopChill, a ...
🚨🇹🇼 PopChill allegedly breached, data on 435,000 users exposed
PopChill, a Taiwanese marketplace for secondhand luxury fashion, has appeared in a data leak shared by the actor "DaOnlySpark".
The files reportedly contain 435,015 user records, 439 business accounts, and 8,539 phone number records.
Exposed information includes usernames, display names, profile photos, phone verification status, account activity, and seller details. Approximately 15,500 accounts are marked as ID-verified.
The actor says the breach occurred on October 21, 2026. The authenticity of the data has not been confirmed.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Published at
2026-10-25 19:45:11 UTCEvent JSON
{
"id": "366154e5d6142ba7e5774b30722736e561280511260e8aed2d4686736980f0d5",
"pubkey": "3602e3a41b34946d81c007fcf5ae0daae25997b4e04b107e82e56a090c0d9b81",
"created_at": 1792957511,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/503/263/432/391/926/original/a30f6f2194964247.png",
"m image/png",
"dim 1600x599",
"blurhash U95}grxvxbxv%7t7t6t7RZayj@WBedRjRjRj"
],
[
"proxy",
"https://infosec.exchange/users/DarkWebInformer/statuses/117503263495248109",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "🚨🇹🇼 PopChill allegedly breached, data on 435,000 users exposed\n\nPopChill, a Taiwanese marketplace for secondhand luxury fashion, has appeared in a data leak shared by the actor \"DaOnlySpark\".\n\nThe files reportedly contain 435,015 user records, 439 business accounts, and 8,539 phone number records.\n\nExposed information includes usernames, display names, profile photos, phone verification status, account activity, and seller details. Approximately 15,500 accounts are marked as ID-verified.\n\nThe actor says the breach occurred on October 21, 2026. The authenticity of the data has not been confirmed.\n\n💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/503/263/432/391/926/original/a30f6f2194964247.png",
"sig": "3103b254f44c04007a923d67000a071e3b333295e669d6fa6b2cdeab5bb844b79396a2fed008ab2516bd35adc02de3bd6202655f4eff3f3981fd49bca4a6756b"
}
