BRIEFLeakhighP55
Database of 200 million YTO Express (China) records for sale
YTO Express
Detected28 September 2026 · 20:07 UTC
A seller on DarkForums is offering a database of YTO Express, a major Chinese courier, reportedly with over 200 million shipment, sender and recipient records. That scale of logistics data enables large-scale doxxing, fraud and targeted phishing. Even outside LATAM, it is a significant fresh dump worth monitoring for resale or regional actors.
CategoryLeak
Severityhigh
Priority score55
Detected28 September 2026 · 20:07 UTC
Leak● 42
Filtración de base de datos de la imprenta brasileña MaxprintA database allegedly belonging to the Brazilian company Maxprint (maxprint.com.br) is being traded on a leak forum. The thread appears dated to January, so it is not a fresh event, but any customer or employee data still enables fraud and phishing. Brazilian organisations should treat it as a known exposure and check for reuse of credentials.Leak● 48
Base de datos de 83M de registros de empresas de EE.UU. a la ventaA seller is offering a United States business database of roughly 82,995,824 records, likely corporate contact and lead data. Although not LatAm-focused, the scale makes it valuable for B2B phishing, spam and social engineering at scale. Defenders and fraud teams should flag bulk outreach targeting their corporate domains.Leak● 60
Filtración de datos de 2 millones de usuarios de IKEAA forum user is leaking personal information of about 2 million IKEA users, including names and contact details. Such a volume of customer PII fuels phishing, credential-stuffing and fraud against consumers and the brand. Retailers and consumer-facing defenders should monitor for downstream abuse and account-takeover attempts.Leak● 84
Base de datos de Banco Azteca (México) a la venta: +5M clientesA seller is offering a database allegedly tied to Banco Azteca/Grupo Salinas/Elektra in Mexico, claiming +160,000 employee and +5 million customer records. If genuine, it exposes sensitive financial and personal data of millions, enabling fraud, account takeover and phishing. LatAm banking and retail defenders should verify it and prepare customer notifications.Leak● 35
Filtración de datos VK3 con más de 800.000 registrosA thread titled VK3 advertises a data leak of over 800,000 records in a '2026 fresh leaks' section. The affected service is unclear, but the scale suggests user account data that could drive credential-stuffing and spam campaigns. Confidence on scope and origin is low, so it merits a look but not a priority alert.Leak● 42
A la venta base de datos de 500.000 usuarios de japan-partner.comA forum seller is offering a database of 500,000 users of japan-partner.com, a Japanese dating/marriage site. Exposed account and PII data can fuel credential reuse, romance scams and identity theft. It is a mid-size commercial leak outside LATAM, relevant mainly for fraud and credential-reuse monitoring.