☑️ Weekly Darkweb – May Week 3, 2026

🔍 U.S.-Based Global Software Development Platform ‘G’ Source Code for Sale

• On May 19, a post selling the source code for the U.S.-based global software development platform ‘G’ was uploaded to the dark web hacking forum ‘BreachForums’.

• The user claimed to have obtained approximately 4,000 records from private repositories, source code for ‘G’’s main platform and internal organizational information. As proof, the user released a list of compressed files extracted from the internal code repositories.

• The user stated that the data would be sold to the highest bidder offering more than USD 50,000, adding that the full dataset would be released publicly if no buyer appears.

• On the same day, ‘G’ stated that the company is investigating whether unauthorized access to internal repositories had occurred in relation to the leak. (Source: ‘G’’s official X account)

🔍 Japan-Based Global Logistics Company ‘K’ Singapore Entity Data for Sale

• On May 15, a post offering the data belonging to the Singapore entity of Japan-based global logistics company ‘K’ was identified on the dark web hacking forum ‘DarkForums’.

✓ Company ‘K’: A Japan-based global logistics company operating logistics networks in Asia, with reported revenue of JPY 753.2 billion in 2025.

• The user stated that the data for sale includes 130GB of data from ‘K’’s Singapore entity, along with 27GB of database backup files related to an electronic trade processing system.

• As evidence of the attack, the user uploaded four screenshots showing lists of stolen data and files containing a list of ‘K’’s banking accounts and bank account guidance for its clients.

🔍 980,000 Customer Records from the UAE’s Largest Online Real Estate Platform ‘B’ for Sale on Dark Web

• On May 19, a post claiming to sell customer data from the UAE-based online real estate platform ‘B’ was uploaded to the dark web hacking forum ‘DarkForums’.

✓ Company ‘B’: The UAE’s largest online real estate platform, providing property sales and rental listings primarily in Dubai and Abu Dhabi.

• The user claimed to have obtained approximately 980,000 customer records, including names, login information, email addresses, phone numbers, IP information, physical addresses, passport and Golden Card images, and property ownership documents.

• As proof of the breach, the user released 18 samples containing customer personal information, 4 passport and ID cards images, and 1 initial property sales contract. Additional sample images, including property ownership certificates and co-ownership certificates, were also uploaded through the user’s Telegram channel.

*The full report is available upon request and for XARVIS subscribers.