BRIEFLeakhighP57
2.4TB Bayou Electrical Services database posted for download
Bayou Electrical Services
Detected27 September 2026 · 22:48 UTC
A 2.4TB database attributed to Bayou Electrical Services was posted on a dark web forum in August 2026. A dump of this size can hold customer PII, contracts, project files and internal credentials useful for follow-on intrusion. Firms in the electrical and contracting supply chain should treat it as a breach exposure and hunt for reused credentials.
CategoryLeak
Severityhigh
Priority score57
Detected27 September 2026 · 22:48 UTC
LeakPriority 53
Filtración del sistema SYRIF del Banco Central de GuineaA DarkForums thread advertises data allegedly from the SYRIF system of the Central Bank of the Republic of Guinea (BCRG), a core financial infrastructure component. If genuine, exposure of central bank systems is high impact for the country's financial sector and payment flows. The post date is unclear, so authenticity and freshness must be verified before acting.LeakPriority 60
Filtración de datos de la aseguradora Ahorra SegurosA threat actor using the handle 'blasphemus' published on DarkForums a database reportedly belonging to Ahorra Seguros containing roughly 25,000 records, dated November 2026. The leak exposes customer data of a Spanish-speaking insurance company and could fuel fraud and targeted phishing. Treat affected customers' personal data and credentials as compromised.LeakPriority 40
Base de datos del dominio gubernamental francés osmose.numerique.gouv.fr filtradaA RaidForums thread offers for free a database apparently tied to the French government domain osmose.numerique.gouv.fr, a .gouv.fr service. If current, exposure of public-sector records is significant for French government defenders. The thread appears to originate from older RaidForums activity, so treat it as likely stale but verify scope and recency.LeakPriority 46
Venta de datos de FENIE Energía, del sector eléctrico españolSeller 'Leadstock' is offering data belonging to FENIE Energía, a Spanish electricity-sector entity, in the DarkForums marketplace. Energy-sector data is sensitive given its link to critical infrastructure and can enable fraud or targeted outreach to industry firms. Verify the authenticity and scope of the offered dataset.LeakPriority 52
Base de datos de Xiaomi China publicada en foro de hackingThreat actor 'Myra' posted a Xiaomi China database on SpyHackerz on October 30, 2026, including CSV files of service orders and related operational records. Exposure of a major electronics vendor's internal data can fuel phishing, warranty fraud and account takeover. Verify scope and monitor for reuse of the leaked records.LeakPriority 44
12 millones de credenciales de romwe.com circulan en xReactorA 12-million-record email:password dataset for romwe.com, an online fashion retailer, is being circulated on the xReactor forums. Such volumes of credentials enable credential stuffing against the retailer and reuse attacks on linked accounts. Users should reset passwords and enable MFA, and the company should hunt for account takeovers.