serverunlockapp.com (DRC) website backup files exposed

Overview

A user claims to have published backup files from serverunlockapp.com, a website serving customers in the Democratic Republic of the Congo (DRC), on the DarkForums market. The thread, posted on 1 October 2026 by user SensitiveDarkForum, advertises a download of the site backup together with a sample of account records.

What was published

The sample in the thread lists user account fields for the affected platform:

• Username
• E-mail address
• Registration flag
• Registration date
• Available balance (in USD)
• Due amount

The excerpt shows roughly two dozen records, most tagged with a registration date of 13-17 November 2024 and with balances from 0 to roughly 334 USD. A single visible balance of 334.649 USD stands out against the rest, which are zero or near zero.

Risks for affected individuals

• Exposed e-mail addresses can be reused for phishing and credential-stuffing campaigns.
• Usernames linked to e-mail addresses make targeted social engineering easier.
• If passwords were part of the backup (not confirmed in the sample), reusing an account password across sites becomes a direct account-takeover risk.

What remains unknown

• The total number of records in the full backup is not disclosed in the thread.
• Whether the leak also contains password hashes, payment details or personal documents is not confirmed.
• The extent of the breach behind the backup exposure is unverified; the poster has not explained the source or method.

What affected people should do

Users of serverunlockapp.com should treat the exposure as real, change any password used on the platform and on other sites where it may be reused, and enable two-factor authentication where available. The data in the sample is posted by the actor and has not been independently verified.