BRIEFLeakhighP62
Manchester Airport databases offered for sale on leak forum
Manchester Airport
Detected3 November 2026 · 20:24 UTC
Reposts collapsed2
A PwsForums user (Selena Data) posted a thread titled 'Complete Manchester Airport databases' in the forum's Database leak section, claiming a full dump of the airport's data is available. Airports are critical transport infrastructure, so staff, contractor and operational data can fuel credential stuffing, targeted phishing and reconnaissance against aviation systems. The thread's own date is not visible in the excerpt, so the recency and authenticity of the dump need verification before treating it as confirmed.
CategoryLeak
Severityhigh
Priority score62
Detected3 November 2026 · 20:24 UTC
Leak● 26
Venta de un volcado del ERP de un colegio K-12 de Emiratos Árabes UnidosA seller on BDF Club is advertising a database dump taken from the ERP system of a K-12 school in the United Arab Emirates. School ERP platforms typically hold student, parent, staff and billing records, so the data can support identity theft and highly targeted phishing of families and teachers. It is a single-institution leak with no government or critical-infrastructure angle and no visible date, so it ranks low for regional alerting.Leak● 30
Base de datos del Fondo de Pensiones de Rusia (100M) reaparece en RaidForumsA user claims to be selling a database of the Russian Pension Fund (PFR) with more than 100 million records on RaidForums. RaidForums has been defunct since 2022, so this is almost certainly recycled or long-circulating material rather than a fresh breach. If genuine it is a very large PII set of Russian citizens, but it carries little operational urgency for Latin American defenders and should be treated as historical.Leak● 46
Filtración de datos de Norauto Francia difundida en TelegramA DarkForums thread claims that customer data from Norauto, a major French automotive service chain, was leaked and is being circulated through Telegram channels. Retail and workshop records typically include names, contact details, vehicle information and service history, which support phishing and fraud against customers. The post date is unclear, so the leak may be older than the current monitoring window.Leak● 74
Base de datos de UFINET LATAM: 1.759 correos y mapa de fibraA dataset attributed to UFINET LATAM was posted on DarkForums, allegedly containing 44 carrier partners, 1,759 corporate email addresses and a geo-mapped inventory of its fibre plant. Publishing backbone topology and partner relationships is high risk for a wholesale telecom operator serving several Latin American countries, because it hands attackers targeting information for network and physical infrastructure. The corporate emails also enable credential stuffing and targeted phishing against staff with privileged access.Leak● 40
Datos de las policías de Abu Dhabi y Dubái a la venta en un foroA DarkForums thread claims to hold data attributed to the Abu Dhabi and Dubai police forces, published behind a login wall with no visible sample or record count. If genuine, law-enforcement personal data or case information can enable targeting of officers, extortion and social engineering against police systems. The claim is unverified and undated, so it is worth monitoring rather than escalating.Leak● 57
Base de datos del registro vehicular de Sindh (Pakistán), 10,6 millonesA thread on DarkForums advertises a Pakistani government vehicle registration database for Sindh containing roughly 10.6 million records. Vehicle registries link owners' names, national identifiers, addresses and plate data, making them a strong base for identity fraud and location profiling at national scale. The posting date is not visible, so the freshness of the data must be validated before treating it as a new incident.