May 03, 2026, 10:51 AM
271
What revealed?
[+] 5 State Electricity DISCOMs compromised (MVVNL, PVVNL, DVVNL, KESCO, PuVVNL) — user PII, Aadhar numbers, PAN numbers, phone numbers, emails, meter numbers, KYC status, billing records, power orders, matched trades
[+] MongoDB fully dumped — 12 databases, wallet balances, wallet recharges, consent records (1.7GB with phone numbers), DLT entities, SMS headers, templates
[+] Elasticsearch fully dumped — 670K+ DLT records, consumer consents, headers, templates, entities
[+] DLT source code extracted — all 32 consumer files, helpers, configs with hardcoded API keys
[+] Credentials extracted — Razorpay live & test keys, Google OAuth refresh tokens, SMS API keys, MNP tokens, DLT encryption keys, database connection strings, admin passwords
[+] PostgreSQL & MySQL databases identified — powerx_trade, mat, smpp, dlt_report, dlt_cdr, antiphishing, one_day_cdr
[+] Grafana fully unauthenticated — all dashboards, datasources, Prometheus targets (42 hosts), server metrics
[+] Docker registries exposed — 30 proprietary images, all manifests and layers extracted
[+] Kannel SMS gateway identified — full production SMPP stack with 145 threads, 22 days uptime, connected to telecom operators
[+] 50+ domains mapped across powerxchange.io, blockcube.co, zynqio.in, teledgers.com, urjamitra.co, zypherlock.in, pvvnl.org
[+] Production consumer auth service exposed
[+] Admin JWT tokens, hashed passwords, OTP databases, transaction records
[+] And much more.
Price : 1000 usd ESCROW ACCEPTED
Download : t.me/+08CiDxqpad0zZDdh
Thanks for support!
271
What revealed?
[+] 5 State Electricity DISCOMs compromised (MVVNL, PVVNL, DVVNL, KESCO, PuVVNL) — user PII, Aadhar numbers, PAN numbers, phone numbers, emails, meter numbers, KYC status, billing records, power orders, matched trades
[+] MongoDB fully dumped — 12 databases, wallet balances, wallet recharges, consent records (1.7GB with phone numbers), DLT entities, SMS headers, templates
[+] Elasticsearch fully dumped — 670K+ DLT records, consumer consents, headers, templates, entities
[+] DLT source code extracted — all 32 consumer files, helpers, configs with hardcoded API keys
[+] Credentials extracted — Razorpay live & test keys, Google OAuth refresh tokens, SMS API keys, MNP tokens, DLT encryption keys, database connection strings, admin passwords
[+] PostgreSQL & MySQL databases identified — powerx_trade, mat, smpp, dlt_report, dlt_cdr, antiphishing, one_day_cdr
[+] Grafana fully unauthenticated — all dashboards, datasources, Prometheus targets (42 hosts), server metrics
[+] Docker registries exposed — 30 proprietary images, all manifests and layers extracted
[+] Kannel SMS gateway identified — full production SMPP stack with 145 threads, 22 days uptime, connected to telecom operators
[+] 50+ domains mapped across powerxchange.io, blockcube.co, zynqio.in, teledgers.com, urjamitra.co, zypherlock.in, pvvnl.org
[+] Production consumer auth service exposed
[+] Admin JWT tokens, hashed passwords, OTP databases, transaction records
[+] And much more.
Price : 1000 usd ESCROW ACCEPTED
Download : t.me/+08CiDxqpad0zZDdh
Thanks for support!
271
