BRIEFLeaklowP32
Fast Payment System 2026 database offered for sale
Detected14 September 2026 · 03:12 UTC
A seller is advertising a 'Fast Payment System 2026 base', suggesting a payment-system database for sale, posted in mid-June 2026. Compromised payment data can drive fraud and account takeover across banks and merchants. The target and region are unclear and the listing is months old, so confidence and urgency are limited.
CategoryLeak
Severitylow
Priority score32
Detected14 September 2026 · 03:12 UTC
Leak● 24
Filtración de datos de 2,8 millones de residentes del Kurdistán iraquíA thread advertises a dataset of roughly 2.8 million records tied to northern Iraq/Kurdistan, likely a regional population or citizen database. Large PII sets enable identity fraud and targeted attacks against the affected population. It is outside the AR-LatAm scope and appears in a long-running thread, so it is marginal for this feed.Leak● 28
Filtración de 272.000 correos de usuarios de LedgerA forum post offers roughly 272,000 Ledger user email addresses, dated early January 2026. Such data fuels phishing and crypto-theft campaigns targeting hardware-wallet owners. It is several months old and an email list rather than fresh access, so it is low priority now.Leak● 38
Filtración de código fuente y CRM interno de LacosteA leak labeled 'Lacoste.com Leak 2026' advertises source code plus internal documents and CRM data, dated mid-2026. Source-code and CRM exposure can reveal internal systems, customer records and logic useful for follow-on attacks. It is not a LatAm target and the post is months old, so it is not a fresh alert but remains relevant context.Leak● 82
Base de datos de 200.000 clientes de IntegraEnergia (España) a la ventaA seller is offering a fresh database of 200,000 customer records from IntegraEnergia, a Spanish energy provider, posted just minutes ago. Energy firms are critical infrastructure, so exposed customer PII enables targeted phishing, vishing and account fraud, and may aid further intrusion. Defenders should expect credential-stuffing and impersonation campaigns against these individuals.Leak● 35
Filtración de 29.800 licencias de conducirA forum user posted a set of roughly 29,800 driver's license records, a sensitive PII package useful for identity fraud and KYC bypass. The thread is dated July 2025, so it is not a fresh alert, and the source jurisdiction is unclear. It is included at low priority as a large PII corpus rather than a time-sensitive event.Leak● 50
Filtración de la base de datos de Free.fr con 19 millones de registrosA large database of roughly 19 million records attributed to the French ISP Free (free.fr) is being circulated in an underground forum thread. It affects subscriber/customer data of a major telecom operator, which is critical infrastructure and a frequent target for downstream fraud and phishing. The thread appears long-running, so the leak is likely not fresh, but the scale keeps it relevant for exposure monitoring.