BRIEFLeakhighP58
Portugal citizen database of 10 million records for sale
Ciudadanos de Portugal
Detected14 October 2026 · 16:25 UTC
A 10-million-record Portuguese citizen database is listed for sale on a darknet forum, dated early September 2026. Data at this scale likely includes national identifiers, addresses and other PII covering a large share of the population. It enables mass identity fraud and targeted phishing, affecting any organization with Portuguese customers or staff.
CategoryLeak
Severityhigh
Priority score58
Detected14 October 2026 · 16:25 UTC
Leak● 35
Volcado de registros de stealer con credenciales (14.10.2026)A fresh daily dump of infostealer logs and user:password lists (U.L.P) was posted on 14 Oct 2026, harvested from machines infected by stealer malware. No specific organisation is named, but such dumps routinely contain corporate VPN, webmail and SaaS credentials that enable account takeover and initial access. Defenders should ingest it for credential-exposure monitoring of their domains.Leak● 55
Filtración de la base de datos de la plataforma cripto Remote3.coA full database dump of the Remote3.co crypto platform (V.2) has been posted for download on a leak forum, apparently a second, larger release. It likely contains user records such as emails, hashed credentials and account metadata, which fuel credential-stuffing and account takeover. Defenders should watch for re-use of these credentials and for resale of the data on combolist feeds.Leak● 35
Filtración de datos y SSN de la Cruz Roja (redcross.org)A listing claims 18,008 rows from redcross.org including 10,050 emails and 17,812 SSNs. Although small in scale, exposed SSNs of Red Cross personnel or volunteers enable identity theft and targeted fraud. Worth only a low-priority watch.Leak● 48
Filtración de 2,48 millones de perfiles de Pathao (Bangladesh)A dataset of 2.48 million Pathao user profiles from Bangladesh, with Facebook/Apple-linked accounts, is being shared. Exposed PII plus third-party login links enable credential stuffing and account takeover. It is a large leak of a real organization and still worth tracking.Leak● 58
Filtración de 21 TB de la noruega Alpha IT (servicios TI)A 21 TB dataset attributed to the Norwegian IT services and software-testing firm Alpha IT has been posted for leak. The volume suggests source code, client data and internal systems, a supply-chain style exposure that can affect Alpha IT's customers. Its scale makes it a priority even outside Latin America.Leak● 68
Filtración de 6,4 millones de clientes de Bouygues TelecomA database of 6.4 million Bouygues Telecom customer records dated 2025 is being offered on a darkweb forum. Telecom providers are critical infrastructure, so exposed subscriber data fuels SIM-swap, phishing and account-takeover against millions of users. Treat it as a fresh, high-volume leak.