Threat Intelligence

Dark Web Roundup: Bangladeshi E-Commerce Data, Vedicline Records, ASUS Database and More Up for Sale

SOCRadar · 7 Sept 2026

Key Takeaway Australian SMBs should monitor for their brand and customer data on dark web forums and enforce unique, non-reused passwords across all business systems to limit the fallout from third-party breaches.

SOCRadar's Dark Web Team has flagged multiple new posts on underground forums this week. One seller is offering an alleged database of 1,762,697 customer records tied to a Bangladeshi e-commerce or retail business, including names, phone numbers and addresses, for $500, with a claim of ongoing direct access to the source database.

A separate listing advertises 100,000 records allegedly taken from Vedicline.com, an Indian beauty and wellness brand, including contact details, location data and hashed passwords, raising risks of phishing and account takeover if passwords are cracked and reused elsewhere. Another actor claims to be selling a zero-day remote code execution exploit for Langflow 1.12.0, said to have been used to obtain a valid OpenAI API key, priced at $2,000 in cryptocurrency.

Additional posts include an alleged 1,023.67 GB ASUS database offered via Telegram, and claimed shell access to an Indian energy sector organisation. As with all dark web claims, these have not been independently verified, but they highlight the ongoing trade in stolen data and access across multiple industries and regions.

Summarised by CISO AI from SOCRadar. We link back to every original so you can read it yourself.