BRIEFLeaklowP50
Claimed credit card database leak of the Swiss National Bank
Swiss National Bank
Detected13 November 2026 · 14:13 UTC
A DarkForums thread by user 'innocentzero' (posted 13 Nov 2026) claims a leaked credit-card database belonging to the 'Swiss National Bank'. The claim is unverified and the same account also posts carding scams, so treat it as a lead rather than a confirmed breach. Financial-sector defenders should validate before acting.
CategoryLeak
Severitylow
Priority score50
Detected13 November 2026 · 14:13 UTC
LeakPriority 45
Venta de 536 GB de datos internos de la empresa surcoreana NextwillA seller on the DarkForums leaks market is offering 536 GB of data attributed to Nextwill, a South Korean technology company (nextwill.com). The volume points to full file-server or backup exfiltration rather than a single application database. Partners and Korean tech firms should assume source code, contracts and customer records may be circulating.LeakPriority 55
Venta de base de datos de SSN y licencias de conducir de EE. UU. (230 millones)A seller using the handle Leadstock is offering on the DarkForums Marketplace a claimed 230-million-record dataset of US Social Security Numbers and driver's licenses. Bulk identity data at this scale fuels synthetic-identity fraud, account takeover and loan fraud, and is routinely resold and cross-matched with other leaks. Defenders holding US customer identity records should treat exposure as likely and tighten verification controls.LeakPriority 42
Filtración de base de datos de la Organización Iraní de Psicología y AsesoramientoA user 'hackersadism' posted on DarkForums a database of roughly 40,000 records attributed to the Iranian Psychology and Counseling Organization, a state-linked body that handles mental-health licensing and citizen records. Although the victim is outside Latin America, the dump is a named-organization leak with personal and possibly clinical data, which is useful for tracking reuse of the same data and for geolocation of Iranian-state exposure. It does not indicate any compromise of Argentine or Latin American government or critical infrastructure, so it is not a regional alert.LeakPriority 44
Venta de 21.000 documentos privados de una notaría de BucarestA seller on DarkNetArmy is offering about 21,000 private documents allegedly taken from notar-bucuresti.ro, a notary office in central Bucharest. Notary archives typically contain identity papers, powers of attorney and property records, which are highly useful for identity theft and fraud. The volume is modest and the post date is not clearly visible, so the priority is limited.LeakPriority 55
Venta de datos de la red corporativa de la auditora india Joisher & AssociatesA seller in the BreachForums sellers section is offering data allegedly extracted from the corporate network of the Indian audit firm Joisher & Associates. Audit firms hold client financial records, tax filings and internal correspondence, making such data a strong precursor for fraud and business email compromise. The post date is not visible, so freshness should be confirmed before any alerting.LeakPriority 68
Venta de datos de 800.000 pasajeros de Azerbaijan AirlinesA seller on the DarkForums marketplace is advertising roughly 800,000 passenger records allegedly taken from Azerbaijan Airlines (azal.az), including upcoming flight information. If genuine, the dataset exposes names, contact details and travel itineraries of travellers, enabling targeted phishing, fraud and physical-risk profiling. Airline data is also valuable for account-takeover against loyalty and booking systems.