CUTSIGNcutting for sign — daily OSINT threat read

Search — “DataSuckers”

1 story · 0 IoCs

Stories

P3

Russia detains suspected DataSuckers members over Dodo Pizza breach started via exposed GitHub credentials

brief 2026-10-19quick readLowactor: DataSuckers

Russian authorities reportedly detained three suspected members of the financially motivated DataSuckers group tied to the Dodo Pizza breach, which allegedly began when corporate credentials exposed on GitHub were discovered and used to access cloud storage, databases, and stored passwords. One suspect was placed under house arrest, and authorities reportedly traced him after he exposed his IP address while accessing stolen data. Hunters should look for exposed corporate credentials in public code repositories and anomalous cloud storage and database access using valid accounts, though the source publishes no technical artifacts.