BRIEFLeakhighP48
200,000-record Keralty US database offered for sale
Keralty US
Detected28 October 2026 · 09:24 UTC
A DarkNetArmy thread advertises a complete 200,000-record database tied to Keralty US, a healthcare provider, meaning patient and administrative data may be involved. Healthcare records carry high regulatory and fraud risk, and the listing claims the dataset is complete, which raises the likelihood it is being sold or traded rather than shared for free. Keralty also operates extensively across Latin America, so similar datasets may exist for its regional entities.
CategoryLeak
Severityhigh
Priority score48
Detected28 October 2026 · 09:24 UTC
Leak● 42
Base de datos de banca y forex con documentos comprometidos a la ventaA PwsForums seller advertises an 'exclusive fresh leak' bundling a forex and banking customer database with compromised identity documents. No victim organization, record count, or sample is disclosed, so the claim cannot be validated and may be marketing hype. If real, such combined data enables account takeover, fraudulent onboarding and KYC bypass against financial institutions.Leak● 58
Supuesta filtración de datos de 8.000 efectivos del Ejército de EE. UU.A seller in the marketplace section of PwsForums claims to hold a database with information on 8,000 US Army personnel. No sample, record schema, or publication date is provided and the thread is framed ideologically, so authenticity is unverified. If genuine, the records would expose service members to targeting, phishing and identity theft, and would be quickly reused by other actors.Leak● 45
Publican 55 millones de registros URL:usuario:contraseñaA forum member posted a 55-million-line URL:login:password dataset on SpyHackerz, described as freshly harvested, most likely from infostealer infections. At this volume it is not a generic small combolist; it likely contains valid corporate and personal credentials across many services, enabling account takeover and initial access into organizations that have not rotated passwords. Defenders should assume some of their users' credentials are present.Leak● 52
Filtración de 11 millones de clientes de la japonesa StarxA dataset claimed to hold 11 million customer records from starx.co.jp, spanning 2017 through October 2026, is being circulated on the DarkNetArmy forum. If authentic, this is a multi-year history of customer data, which is highly valuable for credential stuffing and identity fraud against a Japanese web service. The recency of the data window suggests the exposure may be current rather than a legacy dump.Leak● 62
Base de datos argentina de Ábaco Informática a la ventaA seller using the handle MangaComics posted on the DarkNetArmy forum, roughly nine minutes before collection, a database attributed to Argentine company Ábaco Informática. The record count and fields are not disclosed in the listing, but it appears in the unverified sellers marketplace, so the data may include customer or corporate records. Any Argentine organization handling client data should treat this as a possible local leak and check for reuse of exposed identifiers.Leak● 36
Filtración de base de datos de pasaportes e identidades de IsraelA user on the SpyHackerz forum posted a purported full database leak of Israeli passports and national identity records. Such data enables identity fraud and impersonation, but the listing dates to July 2026 and the material may already be widely circulated. Defenders in identity verification and KYC should monitor stolen identity corpora rather than treat this as a fresh alert.