Dark Web Brokers Repackage Old Breaches as Fresh Corporate Data Leaks

Group-IB researchers uncovered a surge of Chinese-language dark web brokers advertising purported corporate data breaches that are largely recycled or synthetic; samples traced back to prior leaks (Facebook 2021, Eatigo 2020, Truecaller 2022) and inconsistent schema indicate these are lead-generation scams that waste defenders' time. The report highlights five major sources (Exchange Market, Chang’An Sleepless Night, Aiqianjin, Yiqun Data, Phoenix Overseas Resources), shows how brokers combine real fragments with fabricated fields, and recommends structured verification and breach cross-referencing before escalating incidents.