Resources
  • Newsletter
  • News Highlights
Weekly Darkweb: May 2026, Week 2
2026.05.20

☑️ Weekly Darkweb – May Week 2, 2026



🔍 77GB Database Linked to Iran Nuclear Program Risks Exposure on Dark Web


• On the 11th, a post threatening to leak a 77GB database tied to Iran’s nuclear program was uploaded to the dark web hacking forum 'DarkForums.'


• The user claimed to have obtained Iran’s nuclear program archive, insurance and budget records, a large set of Iran-linked phone numbers, and information on nuclear-related government websites, attaching four images as proof, including an Iranian individual’s ID and a screenshot of nuclear data file listings.


• The user said the Iran-Israel conflict is “unacceptable” and warned that all data would be released if the Iranian government does not pay €5,000 by the 15th, urging authorities to make direct contact.


• The user warned that this would be the initial leak, with plans to release additional data connected to Iran and information involving Israel.



🔍 Malaysian Civil Aviation Company ‘C’ Data Exposed on Dark Web


• On the 13th, a data leak involving Malaysian civil aviation firm 'C' was identified on the dark web hacking forum 'DarkForums.'


✓ Company 'C': A statutory authority under Malaysia’s Ministry of Transport responsible for civil aviation safety, security, and technical regulation.


• User 'Grim' claimed to have obtained aircraft identification data, flight approval and authorization records including officials’ personal contact numbers, and air traffic control databases, releasing three screenshots of company 'C'’s aviation portal system as proof.


• The user claimed to still have access and promoted the sale of additional documents upon request.



🔍 Taiwan Electronics Firm ‘F’ Targeted by Nitrogen Ransomware Attack


• On the 11th, Taiwan electronics firm 'F' was listed on the Nitrogen ransomware gang’s leak site.


✓ Company 'F': The world’s largest electronics contract manufacturer, with about $260 billion in revenue last year.


• The ransomware gang claimed to have stolen about 11 million files (roughly 8TB), including confidential guidelines, projects and design documents, releasing nine sample images such as hardware design files, infrastructure data and internal operational records as proof.



👉 Subscribe to <Weekly Darkweb> and get the latest newsletter every week.
Subscribe on LinkedIn
This newsletter is based on news derived from big data collected from over 400 million encrypted pages and channels, including those on the dark web and Telegram.

☎️ Contact us: https://s2w.inc/en/contact

*The full report is available upon request and for XARVIS subscribers.


List