BRIEFLeaklowP44
1.5 million Binance leads listed for sale
Binance
Detected30 September 2026 · 15:32 UTC
A seller is listing 1.5 million Binance-related leads dated 2026, likely contact and account data usable for targeted crypto phishing and fraud. Even partial validity enables convincing scams against exchange customers. It appears to be a marketing/leads set rather than a confirmed core breach, so priority is moderate.
CategoryLeak
Severitylow
Priority score44
Detected30 September 2026 · 15:32 UTC
Leak● 76
Filtración masiva de 180 millones de credenciales (URL:login:password)A stealer-log dump of roughly 180 million URL:login:password entries was published today, labeled private and freshly checked (30/09/2026). Credentials at this scale fuel credential stuffing and account takeover across many sectors and regions. Defenders should hunt for matches and enforce password resets and MFA where hits occur.Leak● 58
Filtración de la base de datos de la universidad UTEL de MéxicoA database allegedly belonging to UTEL, a Mexican online university, was posted for free today by a forum account with almost no details on size or contents. Latin American educational institutions hold student, staff and sometimes payment data, making such leaks valuable for phishing and fraud. Confirm the scope, then push student and staff credential resets.Leak● 40
Base de datos de 310.000 registros de gtptabs.com a la ventaA 310,000-record database attributed to gtptabs.com is being offered on a leak forum. The size suggests a real customer or user base that could be abused for spam, credential stuffing and fraud. The post is several months old, so treat it as background context rather than a fresh alert.Leak● 58
Venta de datos financieros de 373.000 clientes de HamroPay (Nepal)A seller is offering identity and financial data on 373,000 natural persons allegedly from Nepal's HamroPay/Hamropatro platform. The records reportedly include personal identity and payment details, raising risks of account takeover and financial fraud. Financial-sector defenders should treat it as a fresh leak until disproven.Leak● 48
Contactos de la Asamblea Nacional de Francia filtradosA dataset of contact information for members of the French National Assembly is circulating on a RaidForums mirror. Exposing lawmakers' phone numbers, emails and addresses enables targeted phishing and harassment. The listing looks like an older reupload, so urgency is moderate rather than acute.Leak● 82
Filtración de 4,4 millones de usuarios de AlcifMais (Brasil)A seller is offering a database of 4,416,319 records tied to AlcifMais / Grupo Lisp Promotora, a Brazilian financial services group. The scale suggests full customer identity, contact and possibly financial data (CPF, addresses, payment details). Brazilian banks and fintechs should monitor for downstream fraud and credential stuffing.