BRIEFLeakhighP52
100,000-customer database of Scalextric Spain for sale
Scalextric España (scalextric.es)
Detected14 November 2026 · 09:13 UTC
A seller on DarkForums is offering a database of roughly 100,000 records from the Spanish retailer scalextric.es, reportedly including DNI (national ID) numbers. Exposure of DNI alongside customer data raises serious identity-fraud and account-takeover risk for Spanish residents. The listing appears to be a commercial customer-data leak rather than critical-infrastructure compromise.
CategoryLeak
Severityhigh
Priority score52
Detected14 November 2026 · 09:13 UTC
LeakPriority 48
Base de datos de la financiera Kreditplus filtrada para descargaA RaidForums thread offers a downloadable dump attributed to Kreditplus, an Indonesian consumer-finance lender operating in the regulated lending sector. If genuine, it would expose borrower identities and contact data that fuel phishing and identity theft against customers. The company should confirm scope, check regulator obligations and warn affected borrowers.LeakPriority 70
Base de datos de CarMax filtrada y publicada en un foroA downloadable dump advertised as the CarMax database was posted on RaidForums by user 'Wadjet', targeting one of the largest used-car retailers in the United States. If authentic, it would expose customer names, contact details and account information useful for phishing and account takeover. Defenders should validate the sample, monitor for credential re-use and prepare customer notifications.LeakPriority 70
Venta de datos de 800.000 pasajeros de Azerbaijan Airlines (azal.az)An actor is selling roughly 800,000 passenger records belonging to Azerbaijan Airlines (azal.az), including upcoming flight information, on the BreachForums marketplace. Combining PII with future travel schedules raises risks of targeted fraud, scams and physical-security concerns for travelers. The scale and airline-specific data make this a notable commercial data sale.LeakPriority 66
Filtración de documento interno de SpaceX sobre la constelación StarshieldAn internal SpaceX document describing the technical baseline and architecture of the Starshield defense satellite constellation was offered on the BlackBones forum. Starshield supports US government and military communications, so leakage of architecture details could help adversaries target or interfere with these systems. Defense and satellite-sector teams should assess the document's authenticity and sensitivity.LeakPriority 58
Filtración de 4,5 GB de datos de BP BioenergyA threat actor using the handle Hannibal_Lecter published a 4.5 GB data extract allegedly stolen from BP Bioenergy on DarkForums in November 2026. The volume suggests corporate files such as contracts, internal communications or operational data from the bioenergy sector. If legitimate, it exposes sensitive business and partner information, so the company and its suppliers should verify the exposure.LeakPriority 62
Filtración de información del rectorado del ITLA, República DominicanaA DarkForums thread advertises a database described as information from the rector's office of ITLA, a Dominican Republic public technology institute. The exposure centers on institutional/administrative data of a government-backed education entity. Such leaks aid phishing of staff and students and reveal internal structure of a public institution.