A dark web user claiming to have accessed a large trove of Qatari state security databases is offering them for sale for $5,000. The alleged data includes full names, ID numbers, passport details, military ranks, tribal affiliation, and family information dated to May 2026. The threat actor claims the leak is retaliation for Qatar's alleged support for ISIS since 2014, according to the threat actor's post.
A dark web threat actor using the handle "O0cx0iq" claims to have exfiltrated a large database from Qatar's state security apparatus and is offering it for sale at $5,000. The post, reported by reports's curated sources, states the dataset includes personal identifying information — full names, national ID numbers, passport numbers, phone numbers, tribal affiliation, mother's name, military rank and service dates, marital status, addresses, and education records — with a freshness date of May 2026.
The actor frames the leak as retaliation for Qatar's alleged support of the Islamic State (ISIS) since 2014. The claim could not be independently verified, and no official Qatari statement has been issued. The threat actor asserts the data was extracted from internal systems.
This is not The Zioneer's first report concerning Qatar's security posture. On June 14, The Zioneer reported that diplomatic sources said Qatar was offering Iran favorable terms on frozen funds in a push to avert a strike — a separate episode in Qatar's active regional mediation role. The alleged data breach, if confirmed, would mark a significant security incident for the Gulf state, though it is reported solely from a single unverified threat actor post and should be treated with caution.
- StrongQatar proposes $12 billion compromise to unlock Iranian frozen assets
- DevelopingQatar offers Iran favorable timeline on frozen funds in push to avert strike, diplomatic sources say
- DevelopingInstagram report claims Qatar's betrayal of Trump during Iran war
- DevelopingFormer intelligence figure recalls Pakistani officials as liars, Qatar mediating with Iran
Source and signal
A single-sourced dispatch is never rated Confirmed or Strong. Its Signal strengthens only when a second, independent source corroborates it.
- Internal intake