Netmaster.tg: hosting customer database leaked on DarkForums

Overview

On May 31, 2025, DarkForums user cache shared a database breach affecting Netmaster.tg, a Togolese internet services provider offering domain registration, hosting, VPS and SSL services. The post states the breach occurred in 2024 and includes SQL insert statements with user records.

What was published

The SQL samples include:

• First and last names and emails
• Bcrypt password hashes
• Language and security question answers
• Last login IP and hostname
• Email verification and reset tokens
• Account creation dates

Sample rows show Togolese users with accounts dating back to 2019 and logins in 2024.

Risks for affected individuals

Togolese customers of Netmaster could face credential stuffing if their hashed passwords are weak, and targeted phishing using their hosting account details. Security question answers stored in plaintext add to the account takeover risk.

What remains unknown

• Netmaster has not publicly commented
• The total number of accounts is not disclosed
• Whether other service data was included is not confirmed

What affected people should do

Togolese hosting customers of Netmaster should change passwords on the service and on any account reusing the same credentials. Enabling two-factor authentication where available is recommended.