In recent days, information about users of [HamraheAval] has been leaked online and made publicly available. In this report, we take a closer look at the leak, the type of data exposed, its possible source, and the impact on users’ privacy.
Narrative
In April 2025, the hacker group ShadowBits claimed responsibility for breaching the database of Iran’s Mobile Communications Company (HamraheAval), gaining access to the personal information of 30 million subscribers. The leaked data includes users’ full names, dates and places of birth, national ID numbers, birth certificate numbers, and full postal addresses. Despite the scale of the data breach, neither HamraheAval nor official media outlets have issued any response so far. Digiato, a tech news website that briefly reported the incident, removed its article following what ShadowBits described as “pressure from intelligence agencies.”
This event has once again raised serious concerns about the security weaknesses in the country’s communication infrastructure and the lack of transparency in handling data breaches.
At the request of users, Leakfa is currently hosting sample data from this breach. If you have access to the full dataset, please get in touch with us.
Amount of data stolen:30,000,000
