Cybercrime
DaOnlySpark
0mentions, 7 days
2mentions, 30 days
Oct 25, 2026last mentioned
DaOnlySpark is a forum actor claiming to have leaked sensitive data from AdvaCare, including internal financial details, and from Jinko, comprising 3.7 GB of patient records, clinical profiles, and private messages. Both claims remain unverified.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
- 馃毃馃嚢馃嚟 Cambodia Academy of Digital Technology and Institute of Digital Technology allegedly breached, sensitive files leaked The actor DaOnlySpark has released mastodon 路 Oct 25, 2026
- 馃毃馃嚬馃嚰 PopChill allegedly breached, data on 435,000 users exposed PopChill, a Taiwanese marketplace for secondhand luxury fashion, has appeared in a data leak smastodon 路 Oct 25, 2026
References
- https://www.hendryadrian.com/advacare-dataset-claimed-on-forum-20734-timesheet-entries-and-39-staff-accounts/
- https://www.hendryadrian.com/jinko-patient-records-published-with-diagnoses-and-private-messages/
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.