Leak Bazaar Launches Organized Marketplace for Stolen Corporate Data

Severity: Medium (Score: 59.0)

Sources: Cybersecuritynews, Gbhackers

Summary

On March 25, 2026, a new cybercriminal service named 'Leak Bazaar' was introduced by a user known as Snow from SnowTeam on the Russian-speaking TierOne forum. This platform distinguishes itself from traditional data leak sites by offering a structured approach to monetizing stolen corporate data, focusing on processing and refining the information instead of merely publishing it. The service targets corporations that have experienced data breaches, potentially affecting numerous organizations. The scope of impact is significant as it allows for more efficient exploitation of stolen data, which could lead to increased financial losses for affected companies. Currently, there are no specific numbers of victims or CVEs associated with this service, but its operational model poses a serious threat to corporate cybersecurity. The introduction of such a marketplace indicates a shift in tactics among cybercriminals, emphasizing the need for enhanced defensive measures. Key Points: • Leak Bazaar offers a structured marketplace for monetizing stolen corporate data. • The service was introduced on the TierOne forum by a user known as Snow from SnowTeam. • This platform could significantly increase the financial impact on affected corporations.

Key Entities

• Data Breach (attack_type)
• T1567 - Exfiltration Over Web Service (mitre_attack)