BRIEFLeakhighP55
2M-record African National Congress members database for sale
African National Congress (South Africa)
Detected8 November 2026 · 15:43 UTC
A BreachForums seller is offering a 2-million-record database allegedly belonging to South Africa's ruling African National Congress, containing membership and personal data. If authentic, it exposes party members to targeted phishing, extortion and physical risk. It is a high-profile political-entity leak but outside the Argentina/LATAM region, so it is relevant mainly for monitoring reuse of the data in credential attacks.
CategoryLeak
Severityhigh
Priority score55
Detected8 November 2026 · 15:43 UTC
LeakPriority 56
Base de datos de más de 2 millones de registros de airship.co.uk a la ventaA seller in the BreachForums Leaks Marketplace is advertising a database of more than 2 million records attributed to UK company airship.co.uk. The listing does not fully detail the fields, but a dataset of this size typically contains customer and corporate contact data valuable for phishing and credential stuffing. Organizations whose users or partners relate to the firm should confirm whether their accounts appear.LeakPriority 60
Filtración de base de datos y pagos de la francesa mbsdesign.frThe actor 'Sophia' published on DarkForums a database allegedly taken from French company mbsdesign.fr, including payment transaction records. If genuine, it exposes customer identities, order details and payment data useful for card fraud and targeted phishing. Defenders tied to the merchant and its payment partners should verify scope and watch for misuse of the exposed records.LeakPriority 22
Filtración de datos de 1 millón de ciudadanos israelíes (junio de 2025)DarkForums user RuskiNet posted a dataset claimed to contain data on one million Israeli citizens, including national identity details. The post is dated June 2025, so it is more than a year old and has likely circulated widely since; it is not a fresh alert. It still has value for historical exposure checks of affected individuals rather than for immediate response.LeakPriority 48
Base de datos de 12.000 clientes de intermarketing.com.pa a la ventaA BreachForums seller is offering a 12,000-record database from intermarketing.com.pa, a Panamanian car-rental marketing site, with data spanning 2025-2026. The volume is modest but the data is recent regional PII suited to phishing, booking fraud and credential stuffing against Panamanian customers. It is one of the few Latin American datasets in this batch and should be tracked for resale bundling.LeakPriority 70
Filtración de datos personales de empleados de TSMCA DarkForums actor posted a claimed leak of TSMC employee personal information from the Taiwanese semiconductor giant. Although only staff records appear involved, TSMC is strategic critical infrastructure and its workforce data can fuel targeted phishing and insider-oriented attacks. Semiconductor and supply-chain defenders should review exposure and monitor for credential abuse.LeakPriority 62
Acceso admin a allpay.com.tw con 663.000 registros de clientesAn actor on DarkForums claims full administrative access to a Zoho CRM instance belonging to allpay.com.tw, a Taiwanese payment provider, along with roughly 663,000 customer PII records. Payment-gateway customer data is a high-value base for phishing, SIM-swap and downstream account takeover against merchants. Compromise of the CRM tenant also risks tampering with merchant onboarding and settlement details.