Dtunes.ng: full database of the Nigerian crypto and gift card exchange

<p>On 27 June 2025, 0xBlade published to offer for sale data belonging to <strong>Dtunes (dtunes.ng)</strong>, Nigeria on a hacking forum. The claimed data includes names, email addresses, user records. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>I recently gained access to dtunes.ng , a Nigerian platform where people trade gift cards &amp; crypto for cash. Sample Quote: 72025: Abdulaziz, [email&nbsp;protected] ,,2023-09-12T10:54:43.544Z 72026: Bartholomew Adikwu, [email&nbsp;protected] ,,2023-09-12T10:33:40.183Z 72027: Rabiu Abdumumini, [email&nbsp;protected] ,,2023-09-12T10:21:05.620Z 72028: John Anthony, [email&nbsp;protected] ,,2023-09-12T10:19:53.413Z 72029: OLADAYO, [email&nbsp;protected] ,,2023-09-12T10:03:24.123Z 72030: Edelia, [email&nbsp;protected] ,,2023-09-12T10:02:12.854Z 72031: Abdulkereem, [email&nbsp;protected] ,,2023-0</p> <h2>Risks</h2> <ul> <li>Targeted phishing campaigns using compromised email addresses to distribute malware or harvest credentials from employees and customers</li> <li>Identity theft and impersonation using exposed personal identification documents and biometric data</li> <li>Financial fraud using compromised account information and transaction records</li> <li>Regulatory investigation into the organisation's data protection compliance by financial authorities</li> <li>Money laundering risks if customer due diligence documentation was compromised</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that Dtunes (dtunes.ng)'s data has been compromised and is circulating on underground forums. Financial institutions are prime targets for data thieves seeking information that can facilitate fraud. Affected individuals should monitor their accounts for suspicious activity and consider placing fraud alerts with credit bureaus.</p>