🚨🇰🇭 Cambodia Academy of Digital Technology and Institute of Digital Technology allegedly breached, sensitive files leaked
The actor "DaOnlySpark" has released a second batch of files allegedly stolen from Cambodia's Academy of Digital Technology (CADT) and Institute of Digital Technology (IDT).
The actor says they exploited a remote code execution (RCE) vulnerability to access internal systems, obtaining SQL databases, application source code, employee documents, student records, and payment information.
The leak also reportedly contains sensitive credentials, including Microsoft 365, Google, OpenAI, and payment API credentials, along with SSH keys, OAuth secrets, and Firebase service account keys.
Among the exposed files are internal GitHub repositories, employee identity documents, CRM records, financial logs, and administrator password hashes.
The extent of the compromise has not been independently verified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing