MobileSub: 10,328 user records leaked on DarkForums

Overview

On September 4, 2025, DarkForums user N1KA shared a data breach affecting MobileSub.com.ng, a Nigerian digital platform for payments and top-ups. The post states the dataset contains 10,328 user records and publishes the SQL schema with fields covering accounts, KYC data and balances.

What was published

The schema shows the following fields per user:

• Username, first and last names
• Phone and email
• API keys and account passwords
• Account and referral balances
• KYC bank name, account number and account name
• KYC BVN field
• Registration and KYC dates

The thread provides the full database schema and row count.

Risks for affected individuals

Nigerian MobileSub users face a high risk of financial fraud, since the schema includes bank account details and a BVN field alongside passwords. BVN exposure can facilitate identity-linked financial crime, and API keys enable account takeovers.

What remains unknown

• MobileSub has not publicly commented
• Whether the KYC fields contain real BVNs is not confirmed
• The download link was not tested at capture time

What affected people should do

Nigerian MobileSub users should change passwords and API keys immediately and monitor bank accounts for unauthorized activity. Anyone whose BVN may be exposed should contact their bank and report to the relevant authorities.