Skip to content
UnclassifiedUnknown

BreachLaboratory

BreachLaboratory is a threat actor group, tracked by Brandefense. It uses 1 MITRE ATT&CK technique.

Techniques
1
Exploited CVEs
No CVE data
First seen
Nov 27, 2025
Last seen
Dec 17, 2025
Record updated

About BreachLaboratory.

BreachLaboratory is a cybercrime actor that specializes in the extraction and sale of sensitive financial and identity datasets from various organizations. They have claimed to exfiltrate approximately 950,000 records from Grupo Catalana Occidente and over 18,000 records from Bank Mandiri, with data including customer names, account details, and SWIFT codes. The actor operates on underground forums, selling structured datasets such as CSV files and SQL dumps, and emphasizes the validity and financial utility of the data. Their activities indicate a focus on monetization through direct database sales and potential downstream fraud enablement.

Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.