BRIEFAccess salelowP35
Admin access and database leak for foodtrack.fr
foodtrack.fr
Detected29 October 2026 · 16:24 UTC
A BlackBones forum Freebie thread from 19 August 2026 offers a database leak plus admin access for foodtrack.fr, a French food-sector website. Offering administrative access alongside data indicates a compromised backend useful for further intrusion. The post is roughly two months old and the target is small, so it is a lower-priority but still relevant exposure.
CategoryAccess sale
Severitylow
Priority score35
Detected29 October 2026 · 16:24 UTC
Access sale● 62
Venta de 1.878 accesos bancarios a Caixa Geral de Depósitos (Portugal)A DarkForums seller is advertising roughly 1,878 valid online-banking credentials for Caixa Geral de Depósitos, Portugal's state-owned bank. The listing markets turnkey account access rather than a raw combolist, implying tested credentials. Because CGD is state-controlled and central to Portuguese retail banking, these accesses enable account takeover, fraudulent transfers and mule activity against real customers.Access sale● 48
Venta de acceso a 1.878 cuentas del banco portugués CGDA seller on DarkForums claims to hold 1,878 valid banking access records for Caixa Geral de Depósitos, Portugal's state-owned bank. Credentials at this volume enable account takeover, unauthorized transfers and fraud against real retail customers. Although Portugal sits outside Latin America, a state-owned bank exposure still warrants monitoring by financial-sector defenders.Access sale● 60
Venta de acceso a la web de la policía de Rajastán (India)A forum user posted a sales thread for access to the Rajasthan Police website, a state law-enforcement body on a .gov.in domain. Although outside the Latin America region, sale of access to a police portal implies web-shell, panel or credential compromise of a government system that holds citizen complaints and case data. Details are behind a login wall, so verification of the level of access is needed before acting.Access sale● 62
Acceso al portal de la Policía de Rajasthan (police.rajasthan.gov.in) a la ventaA verified seller on DarkForums is offering access tied to police.rajasthan.gov.in, the official portal of an Indian state police force. Access to a law-enforcement web asset can expose internal systems, officer data and citizen records. Any government buyer of such access should be treated as a serious law-enforcement and data-protection risk.Access sale● 50
Venta de acceso a la infraestructura interna de Epic GamesA user on BreachForums advertised "EPIC GAMES ORG ACCESS" on 28 October 2026, claiming organisational access to the game publisher's environment. The post does not state the access vector, but sales of this type typically involve VPN, SSO or CI credentials and are frequently gateways to supply-chain attacks on game studios. Epic Games also operates payment and account infrastructure, making the claim worth validating quickly.Access sale● 28
Venta de claves API y accesos iniciales en LeakForumA secondary seller on LeakForum advertises an 'API Key Shop' offering API keys and initial access, indicating resale of cloud and service credentials used as intrusion footholds. The ad is dated March 2025, so it is stale and not a fresh alert, but it reflects an active initial-access brokerage channel worth monitoring.