BRIEFLeaklowP40
5 million-line German database leaked in seven parts
Germany (5M credential lines)
Detected16 September 2026 · 05:12 UTC
A 5 million-line German credential database was shared in seven parts on BreachForums, gated to registered users. The volume suggests a sizable credential set potentially usable for account takeover and fraud. It sits outside the region with uncertain provenance, so it is a lower priority for AR-LATAM defenders.
CategoryLeak
Severitylow
Priority score40
Detected16 September 2026 · 05:12 UTC
Leak● 30
Filtración de base de datos de la constructora francesa EiffageA database allegedly belonging to French infrastructure and construction giant Eiffage was posted for leak in early 2026. Eiffage runs major public-works and concession infrastructure, so any exposed customer, employee or project data is relevant to critical-infrastructure risk. The content is months old, so it is background context rather than an actionable fresh alert.Leak● 34
Filtración del correo del director del FBI Kash Patel por HandalaAn email leak attributed to the Iran-linked group Handala claims to expose data tied to US FBI Director Kash Patel. Handala has repeatedly targeted high-profile government figures, so it fits a broader influence and hack-and-leak campaign. The material dates to March 2026, making it useful context rather than a fresh alert.Leak● 66
Filtración de 3,8 GB de documentos de drones militares de Corea del SurA 3.8 GB archive of documents tied to South Korea's military UAV/drone programs was posted on BreachForums for download. It exposes defense procurement and technical material for a national military, a high-value target for foreign intelligence. Though outside Latin America, it is a useful indicator of defense-sector exfiltration to track for regional analogs.Leak● 40
Filtración de base de datos de la constructora EiffageA database allegedly belonging to French construction giant Eiffage was posted to a leak forum, with the thread dated June 2026 and referencing a February 2026 leak. It concerns a real corporate organization, but it is a European firm outside the AR/LATAM scope and the post is several months old, so it is not a fresh alert. It remains worth tracking for credential reuse and downstream targeting of suppliers.Leak● 55
Base de datos del monedero BitboxWallet a la ventaA threat actor (Spain74) posted a database allegedly belonging to BitboxWallet, a cryptocurrency wallet service, on BreachForums on 16 September 2026. If genuine, it could expose user account records, emails and wallet-related data for the platform's customers. Crypto wallet leaks are high priority because stolen PII and credentials enable account takeover and financial theft.Leak● 38
Filtración de base de datos de la tienda brasileña lojadoponto.com.brAn actor posted the database of the Brazilian e-commerce site lojadoponto.com.br on BreachForums for download. The leak exposes customer and order data of a commercial retailer in Brazil. While lower impact than a government target, the resale and fraud potential for regional customers warrants monitoring.