Rotarin
New Member
- Joined
- September 2, 2026
- Messages
- 1
- Reaction score
- 1
- Points
- 0
- Thread Author
- #1
Żabka (Poland’s largest convenience chain) suffered a major breach.
Exposed: employee PII, internal projects, 89 repos of source code, and production credentials.
Full dataset: negotiable
Contact: ohnorw@tutamail.com
samples: 17.63 MB folder on MEGA
Data Package Overview – Samples Included
Personal Data (PII)
Full names, @zabka.pl emails, JIRA usernames, account IDs, contractor directory from ~518k JIRA issues.
~1M user refs across 20+ vendors (Accenture, Netguru, Onwelo, BlueSoft, Sygeon…).
Confidential Docs
JIRA exports: 229,734 IT service tickets
POS (Nowa Kasa), sales (ZSS), Cyberstore/zMarket, SAP ERP+MDG, Lotto integration, PDRIWF/PTECHN portfolios.
Source Code
89 Git repos • ~11,739 files
cs-market platform: Java/Spring microservices, React frontends, Terraform, K8s Helm, ArgoCD, CI/CD, internal tooling.
Production Credentials Exposed
• 4 prod DB passwords (64 chars each)
• Solace broker creds
• MongoDB admin passwords
• Hardcoded .env tokens
Infrastructure Mapping
Azure/AKS full details: 16 prod DB clusters, Istio mesh, Elastic/Prometheus/Grafana stack, SSH access patterns to store servers (port 90, local PostgreSQL).
Business Intelligence
Vendor relationships, bug/outage history, retail ops (POS/sales/orders/inventory).
242 incident mentions • 15,618 RODO/GDPR refs • ~449 IBAN mentions
Test accounts with real shop IDs (Z0730, Z0892, Z2777, Z2939, Z0719, Z0249, Z3280).
Repository Structure (sample)
cs-market/
├── backends/ (ms-delivery, products, prices, stocks, bom, invoices, labels...)
├── frontends/ (core, deliveries, products, suppliers, label-designer...)
├── devops/ (argocd, istio, terraform, helm charts, dockerfiles, infra automation...)
├── tools/ (cyberdocs, qa-tools, solace-queue-viewer...)
└── tests/ (automated tests, jira-bugs-dashboard, rollout-validation...)
jira/
├── AASUPPORT, BLUES, CORE, DEVOPS, ITSD, ITSS
├── PDRIWF, PTECHN, PZABF, ZSS, ZMAR, ZWIT
├── SAPZ, SCM, WMSDEV, YMSDEV, TMSDEV
├── CYBSTO, CYBDS, NPOS, MDG, LOTIT
└── ... (48 project exports total)
Full sample tree & JIRA dumps available upon request.
Happy browsing – you know where to reach us.
Exposed: employee PII, internal projects, 89 repos of source code, and production credentials.
Full dataset: negotiable
Contact: ohnorw@tutamail.com
samples: 17.63 MB folder on MEGA
Data Package Overview – Samples Included
Personal Data (PII)
Full names, @zabka.pl emails, JIRA usernames, account IDs, contractor directory from ~518k JIRA issues.
~1M user refs across 20+ vendors (Accenture, Netguru, Onwelo, BlueSoft, Sygeon…).
Confidential Docs
JIRA exports: 229,734 IT service tickets
POS (Nowa Kasa), sales (ZSS), Cyberstore/zMarket, SAP ERP+MDG, Lotto integration, PDRIWF/PTECHN portfolios.
Source Code
89 Git repos • ~11,739 files
cs-market platform: Java/Spring microservices, React frontends, Terraform, K8s Helm, ArgoCD, CI/CD, internal tooling.
Production Credentials Exposed
• 4 prod DB passwords (64 chars each)
• Solace broker creds
• MongoDB admin passwords
• Hardcoded .env tokens
Infrastructure Mapping
Azure/AKS full details: 16 prod DB clusters, Istio mesh, Elastic/Prometheus/Grafana stack, SSH access patterns to store servers (port 90, local PostgreSQL).
Business Intelligence
Vendor relationships, bug/outage history, retail ops (POS/sales/orders/inventory).
242 incident mentions • 15,618 RODO/GDPR refs • ~449 IBAN mentions
Test accounts with real shop IDs (Z0730, Z0892, Z2777, Z2939, Z0719, Z0249, Z3280).
Repository Structure (sample)
cs-market/
├── backends/ (ms-delivery, products, prices, stocks, bom, invoices, labels...)
├── frontends/ (core, deliveries, products, suppliers, label-designer...)
├── devops/ (argocd, istio, terraform, helm charts, dockerfiles, infra automation...)
├── tools/ (cyberdocs, qa-tools, solace-queue-viewer...)
└── tests/ (automated tests, jira-bugs-dashboard, rollout-validation...)
jira/
├── AASUPPORT, BLUES, CORE, DEVOPS, ITSD, ITSS
├── PDRIWF, PTECHN, PZABF, ZSS, ZMAR, ZWIT
├── SAPZ, SCM, WMSDEV, YMSDEV, TMSDEV
├── CYBSTO, CYBDS, NPOS, MDG, LOTIT
└── ... (48 project exports total)
Full sample tree & JIRA dumps available upon request.
Happy browsing – you know where to reach us.