Hacker attempts to sell data of 500 million WhatsApp users on dark web

The malicious actor is selling the datasets of various countries for up to US$7,000

Add bookmark
Hacker attempts to sell data of 500m WhatsApp users on dark web

A hacker has allegedly posted a dataset to the dark web containing the personal information of almost 500 million WhatsApp users.

In the post, which was uploaded to hacking forum BreachForums on November 16, the hacker claimed to be selling up-to-date personal information of 487 million WhatsApp users from 84 countries. In the post, the alleged hacker said those who bought the datasets would receive “very recent mobile numbers” of WhatsApp users.

The leak was originally reported by technology news site CyberNews, which said it had “investigated” a sample of the data set provided by the hacker. According to CyberNews, the site was able to verify that 1,914 phone numbers provided by the malicious party did belong to WhatsApp users, meaning the hacker’s claims were “likely...to be true”.

According to the bad actor, among the 487 million records are the details for 32 million US users, 11 million UK users and six million German users. CyberNews reported that the hacker had told them that they were selling each of these data sets for US$7,000, $2,500 and $2,000 respectively. 

A screenshot shared by CyberNews of the alleged hacker's post on BreachedForums  

The hacker did not explain how such a large amount of user data had been collected, saying only that they had “used their strategy” to obtain it.

This news comes just days after it was reported that WhatsApp’s parent company, Meta, had allegedly fired employees for breaking Facebook’s terms of service by hacking into user’s accounts.

Meta has since denied the data leak, with an unnamed spokesperson allegedly reaching out to multiple news sites who have reported on the leak on November 28. According to these news sources, the spokesperson has said that the CyberNews article is based on “unsubstantiated screenshots” and that there is “no evidence of a ‘data leak’ from WhatsApp”.

As of writing, there has been no official statement from WhatsApp or its parent company Meta on the alleged data leak. 


Upcoming Events

Automotive Cyber Security, Connectivity & SDV Week 2025

18th - 20th November, 2025

Van der Valk Hotel Berlin Brandenburg, Germany

Automotive Cyber Security, Connectivity & SDV Week 2025

Digital Identity Week

1st - 2nd September 2026

Sydney, Australia

Digital Identity Week

Latest Webinars

From Dependencies to Defences: Navigating Software Supply Chain Security

2025-09-24

11:00 AM - 12:00 PM SGT

Learn how to defend your software supply chain from dependency threats and build resilient security...

Unpacking global regulatory frameworks to enhance third-party operational resilience

2024-11-14

11:00 AM - 12:00 PM EST

Join this webinar to explore the resilience-focused requirements of DORA, NIS2 and other global regu...

Preventing financial and reputational risk with process intelligence

2024-05-23

11:00 AM - 12:00 PM EDT

Learn how to manage risk stemming from poorly controlled processes in a collaborative way

Recommended