A threat actor is offering a database allegedly stolen from sea2d3d.com, claiming the dataset contains 17,869 user records alongside access to an administrative dashboard.
The database was advertised for sale on Sept. 25, with the actor claiming it contains thousands of records associated with users of the platform. BreachNews has not independently verified that the data originated from Sea2D3D or that the platform’s systems were compromised.
The advertised database fields include phone numbers, usernames, nicknames, account balances, betting totals, net betting figures, last-login timestamps, merchant identifiers and internal user IDs. The actor also claims the compromised environment includes an administrative dashboard.
Sample shows recent account activity
A sample shared alongside the sale listing contains records structured around account and betting activity. The entries include balances, total and net betting figures, account creation and modification timestamps, and recent login activity extending into September 2026.
The sample also contains an is_test field and records with no apparent betting activity. As a result, the actor’s claim that the database represents 17,869 individual players cannot currently be established. The more supportable figure is 17,869 database records.
BreachNews is not publishing the exposed phone numbers, usernames, merchant identifiers or other potentially identifying information contained in the sample.
Origin of the database remains unverified
The threat actor is attempting to sell the alleged database rather than releasing it publicly. The account making the claim has a limited public history, leaving little established track record that could be used to assess the reliability of the allegation.
There is also little publicly available information identifying the organization operating sea2d3d.com. Although the database structure and terminology appear consistent with a platform tracking betting activity, BreachNews could not independently establish the nature of the service or verify the actor’s description of its user base.
If authentic, the combination of phone numbers, usernames, account activity and financial-style balance information could increase the risk of targeted phishing, impersonation and account takeover attempts against affected users.
Sea2D3D had not issued any public statement addressing the alleged breach at time of publication.
