Find notable cyber news and cases, enriched with sources, timelines, and signals.

Five alleged Lumma Stealer affiliates leaked in doxxing campaign

Data Leak
First reported
Last updated
Happening score
H score 24
1 unique sources, 1 articles

Summary

Hide ▲

A doxxing-style data leak exposed sensitive personal and financial records tied to five people allegedly linked to Lumma Stealer, creating identity-theft and harassment risk. The exposed details included passport numbers, bank account information, and email addresses. The material was posted on Lumma Rats during a reported window of August to October 2025. The exposure also suggests possible access to compromised accounts or databases.

Related Happenings

Lumma Stealer group doxxing campaign

Campaign
First: 20.10.2025 15:42 Last: 20.10.2025 15:42 Sources 1

How related: Trend Micro said this aligns with a targeted underground exposure campaign that has put the spotlight on five individuals allegedly linked to the Lumma Stealer operation.

About this happening: A **targeted underground doxxing campaign** has hit the **Lumma Stealer** ecosystem, exposing alleged core members and disrupting the operation’s communications. Trend Micro said...

Timeline

  1. 21.10.2025 11:00 1 articles · 7mo ago

    Telegram accounts compromised for Lumma Stealer operations

    Victim Impact Update

    Telegram accounts used by a Lumma Stealer representative were reportedly stolen on September 17, 2025, disrupting communication with customers and coordination of operations tied to the malware ecosystem.

    Show sources
  2. 21.10.2025 11:00 2 articles · 7mo ago

    Five alleged Lumma Stealer affiliates exposed in doxxing campaign

    Initial Disclosure

    A rival cybercrime doxxing campaign exposed five individuals allegedly linked to the Lumma Stealer operation on Lumma Rats, leaking passport numbers, bank account information, email addresses, and links to online profiles and suggesting insider access or compromised accounts.

    Show sources