Yalla Tager: 20,000 user records leaked on DarkForums

Overview

On December 26, 2025, DarkForums user Habibi published a CSV file described as the user database of Yalla Tager, an Egyptian online marketplace. The file contains around 20,000 records with customer details, dated 2025. A second DarkForums thread by user request89 posted the same dataset, which corroborates the leak.

What was published

The CSV includes the following columns per user:

• Name and email address
• Customer code and shop name
• Telephone and group type (individual or wholesale)
• ZIP code, country, province and city
• Customer since date and website source

Sample rows show Egyptian customers, including wholesalers with phone numbers and addresses in Arabic.

Risks for affected individuals

Egyptian shoppers and vendors registered on Yalla Tager face phishing, spam and scam calls using their real names, phones and addresses. Vendor records with shop names and customer codes could be used to impersonate businesses.

What remains unknown

• Yalla Tager has not publicly commented on the leak
• The exact collection date of the records is not confirmed
• No password data was visible in the sample

What affected people should do

Egyptian users of Yalla Tager should be cautious of unsolicited calls or messages referencing their marketplace account. Anyone who reused marketplace credentials should change them, since the dataset includes customer identifiers.