BRIEFLeakhighP52
11M-record database of Japan's StarX.co.jp for sale
StarX.co.jp
Detected29 October 2026 · 10:24 UTC
A DarkForums user ('SpartanX') posted an 11-million-record database attributed to StarX.co.jp, a Japanese company, on 29 Oct 2026. If legitimate, the dump exposes customer identities and account details at scale, enabling phishing and account takeover. Freshly listed and sizeable, it should be tracked for credential reuse against Japanese services.
CategoryLeak
Severityhigh
Priority score52
Detected29 October 2026 · 10:24 UTC
Leak● 82
Base de datos de ANSES Argentina a la venta en BreachForumsA BreachForums actor is advertising a full database allegedly belonging to ANSES, Argentina's national social security administration, which holds identity, employment and benefit records for millions of citizens. If genuine, this is a high-value government leak enabling identity fraud, targeted phishing and credential abuse against public services. The post date is not visible, so the dataset's freshness and completeness should be verified before public alerting.Leak● 36
Filtración de base de datos del NHS británico con 31.000 registrosA DarkForums user ('Mylvunar') posted on 15 Oct 2026 a database allegedly from the UK National Health Service containing about 31,000 records. Health data is among the most sensitive categories and, even at modest scale, can fuel identity fraud and targeted scams against patients. As critical health infrastructure, any NHS exposure warrants verification.Leak● 44
107 millones de registros de agencias de viaje iraníes a la ventaA DarkForums listing advertises 107 million personal records allegedly sourced from more than 20 Iranian travel agency companies, typically including names, contact data and booking details. Travel data is valuable for booking fraud, phishing and credential stuffing. The dataset is sold in bulk with no confirmed post date or sample verification.Leak● 45
Filtración de datos de clientes de Getir y BiTaksi afecta a 200.000A DarkForums user ('Korvpokil') posted a fresh dump of roughly 200,000 customer records allegedly from Getir and BiTaksi, popular Turkish delivery and ride-hailing apps. The dataset includes customer identities and contact details that enable phishing and account takeover. It is a moderate-size but current leak affecting widely used consumer platforms.Leak● 46
Datos de 160 millones de clientes de aseguradoras iraníes a la ventaThe same actor is selling 160 million personal data records attributed to more than 20 Iranian insurance companies, likely including policyholder identity and contact details. Insurance records are highly sensitive and valuable for fraud, identity theft and targeted social engineering. The data is offered in bulk and freshness and sample validity remain unconfirmed.Leak● 48
Base de datos de TAPSI (194M registros) a la ventaA DarkForums seller is offering 194 million unique records allegedly taken from TAPSI, an Iranian ride-hailing platform comparable to Uber, likely containing rider and driver personal data. Datasets of this scale fuel phishing, SIM-swap and account-takeover campaigns. The listing targets bulk buyers and the post date and sample validity are unconfirmed.