BRIEFLeakhighP47
11-million-record database of Japan's StarX leaked
StarX Co JP
Detected28 October 2026 · 18:24 UTC
An 11-million-record database attributed to Japanese firm StarX Co. was offered on the pwnfrm dark-web forum. The scale indicates a substantial customer or user dataset valuable for credential stuffing, phishing and fraud. Although outside Latin America, the volume merits monitoring for regional spillover and downstream abuse.
CategoryLeak
Severityhigh
Priority score47
Detected28 October 2026 · 18:24 UTC
Leak● 34
Filtración de registros Salesforce con datos personales de Infinite CampusA moderator post on the Spear leak forum advertises Salesforce records from Infinite Campus, a US K-12 student information system provider, containing PII. The thread is dated 30 March 2026, so it is roughly seven months old and already widely circulated. It matters mainly to US school districts whose staff and student data may be included.Leak● 74
Base de datos con más de 700.000 registros de Itaú Brasil publicada en foroA Premium Members section post by 'moonsh1ne' on DarkNetArmy advertises a database of 700,000+ records tied to Itaú, one of Brazil's largest banks, and was published today. If authentic, the set would expose customer or account data usable for fraud, credential stuffing and social engineering against bank clients. Brazilian financial institutions should assess whether the records match internal data.Leak● 28
Base de datos de la patrulla fronteriza rusa filtrada (2022)A leak of Russian border patrol records from 2022, covering individuals who crossed the Russian border including names and entry dates, was reshared on RaidForums. It is government-sensitive data but dated and outside Latin America, limiting immediate relevance. Useful as background on cross-border movement data exposure, not as a fresh alert.Leak● 32
Directorio de empleados de U.S. Bank de 2023 filtradoA BreachForums thread offers a file named as a U.S. Bank employee directory dated May 2023, with 114,076 lines. It is an old internal directory rather than customer accounts, but it still enables targeted phishing and org-chart mapping against the bank. The data is stale and has circulated for years, so it is not a fresh alert.Leak● 78
Base de datos de Serasa Experian de Brasil filtrada para descargaA download of the Serasa Experian database was advertised on a dark-web forum; Serasa is Brazil's largest credit bureau, holding financial and identity data on millions of citizens. Such a leak enables identity theft, loan fraud and account takeover against Brazilian consumers and businesses. The scope is unverified but the target is high-value critical financial infrastructure.Leak● 87
Filtración de base de datos del Instituto de Salud de ChiapasThe same Spear thread, mirrored here on the clearnet spear.cx domain, advertises a freshly posted database belonging to the Instituto de Salud del Estado de Chiapas, Mexico's state public health body. Patient and staff records are highly sensitive, enabling identity theft and targeted phishing. Posted only minutes ago, this is a live exposure that defenders must treat as urgent.