QZaem

In September 2023 a significant data breach occurred at the microcredit organization Qzaem. The initial leak surfaced on darknet forums in January 2024 where user data was offered for sale. Due to an unpatched vulnerability on the company website another group of hackers accessed and downloaded a fresh database on February 3 2024 subsequently releasing it into the public domain. The compromised dataset consists of two main files totaling 7.6 million unique records. The exposed information includes sensitive personal details such as loan history and passport data along with weakly hashed passwords using MD5 and a static salt.