CSIDB logo
Threat actor

The Real Deal Market

Attribution profile

Type
Criminal
Location
United States of America
Known incidents
1 incident
First seen
2016-03-03
Last seen
2016-03-03
Updated
2026-07-31 16:19
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

TheReal Deal Market is an alias used by a threat actor. The actor is known to operate from the United States of America.

On March 3, 2016, the actor was linked to a breach of a telecommunications provider. The breach resulted in the exposure of approximately forty thousand employee records. The compromised data included names, email addresses, phone numbers, office locations, managerial associations, and login activity details. Additionally, the exposed information contained credential management timestamps covering several years, with some entries reflecting recent activity. The actor advertised the stolen employee data for sale on a dark web marketplace. The marketplace listing hinted at possible access to further data such as customer information. No evidence was found to corroborate the claim of additional customer data being available.

The affected telecommunications provider confirmed its awareness of the incident. In response, the provider initiated a third‑party forensic investigation. The provider also collaborated with law‑enforcement authorities to address the breach. Throughout the response, the company emphasized its commitment to data security and privacy. Details of the incident were reported by Vice in an article published at the time. This case represents one of the publicly reported operations associated with The Real Deal Market.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB