☑️ Weekly Darkweb: October 2026, Week 3

🔍 Database Access to Pakistan's Punjab Land Record Authority Advertised for Sale

• On October 20, a post advertising database access to Pakistan's Punjab Land Record Authority appeared on the dark web hacking forum 'PwnForums.'

✓ Punjab Land Record Authority (PLRA): the government agency responsible for digitizing and managing land records in Punjab, Pakistan, and providing related administrative services.

• The forum user 'bytetobreach' claimed that an access control vulnerability in Punjab Urban Land Systems Enhancement (PULSE) allows unauthenticated searches and queries across approximately 15.65 million land registration records stored with PLRA. The records include names, 13-digit Computerized National Identity Card (CNIC) numbers, and property details.

• The user claimed to have reported the vulnerability by email to PULSE's IT department and the Pakistan Computer Emergency Response Team but received no response.

🔍 Turkish Financial Company 'T' Data Leaked on Dark Web

• On October 22, a post claiming to leak financial data from Turkish financial company 'T' was identified on the dark web hacking forum 'Exploit.in.'

✓ 'T': a leading Turkish securities and investment banking group, with reported annual revenue exceeding approximately USD 10 billion in 2025.

• The forum user 'JaneWilde11' claimed to have obtained 7.5 GB of data containing 40,456 internal financial files and shared a download link in the post.

• According to the threat actor, the data was stolen by a hacking group calling itself 'MLKP Revolutionary Justice Hackers.' The group characterized the leak as part of a cyber campaign against alleged embezzlement and systemic corruption within the government.

• According to local media reports, 'T' has been embroiled in a major Ponzi scheme, with its chairman detained pending investigation. The scandal has also prompted allegations implicating the president and senior figures in the government.

🔍 Dubai International Financial Centre Data Leaked on Dark Web

• On October 21, a post claiming to leak an internal database belonging to the Dubai International Financial Centre in UAE was identified on the dark web hacking forum 'PwnForums.'

✓ Dubai International Financial Centre (DIFC): a financial free zone under the Dubai government and the largest global financial hub in the Middle East, Africa and South Asia, hosting thousands of international financial institutions, asset managers, law firms and consulting firms.

• The forum user 'Reze,' identifying themselves as the 'REZE Ransomware Group,' claimed to have breached DIFC's systems and stolen approximately 200 GB of data, including 430,000 emails, passports and identification documents, lease agreements, and internal SAP and ERP data.

• The user released sample data containing employee email addresses and contact details as evidence of the breach and demanded a ransom of USD 5 million.