BRIEFLeakhighP70
Ledger USA customer database with 205K users for sale
Ledger USA
Detected22 September 2026 · 08:01 UTC
A DarkForums seller is offering a database of roughly 205,000 Ledger USA users, posted on 19 September 2026. Ledger is a leading crypto hardware-wallet vendor, so the data can drive phishing, SIM-swap and targeted theft against verified customers. Defenders should watch for credential-stuffing and brand-impersonation campaigns.
CategoryLeak
Severityhigh
Priority score70
Detected22 September 2026 · 08:01 UTC
Leak● 47
Filtración de base de datos de 58K registros de firma brasileñaThe AnkaTeam crew is advertising a 58,000-record database leak from the Brazilian domain sinepenopr.com.br on TurkHackTeam. Even at mid scale, exposed records can fuel credential stuffing and targeted phishing against Brazilian customers. Defenders should verify the exposure, confirm the data set and force password resets for affected accounts.Leak● 82
Filtración de datos de 394K usuarios de la venezolana DigitelA database with roughly 394,000 user records of Digitel, a major Venezuelan mobile telecom operator, is being offered on DarkForums. The exposed subscriber data can enable SIM-swap, phishing and account-takeover against Venezuelan users. As state-linked critical telecom infrastructure, a leak of this scale warrants subscriber notification and forced credential resets.Leak● 30
Filtración de datos del contratista de defensa Rheinmetall DefenceA leak attributed to European defence contractor Rheinmetall Defence was posted in February 2023, exposing sensitive defence-supplier data. Defence supply chains are high-value targets for espionage, so such material can aid reconnaissance and targeting. It is stale, so treat it as background context rather than a fresh alert.Leak● 55
Filtración de seis millones de archivos del banco ICBC LondonA leak titled 'ICBC London' with roughly 6 million files is circulating on a cracking forum, targeting the London branch of a major Chinese bank. Financial data at this scale enables fraud, account takeover and regulatory exposure. Even without a clear date, the size and finance-sector target justify flagging it for fraud and insider-risk monitoring.Leak● 42
Filtración de 5 millones de logs de credenciales URL:LOG:PASSA private dump of roughly 5 million URL:LOG:PASS stealer-log credential pairs was posted for distribution. Logs at this scale fuel credential stuffing and account takeover across many services, including webmail, VPN and admin portals. Not region-specific, but the volume makes it a useful hunting source for defenders.Leak● 58
Filtración de base de datos de pasaportes e identidad de IsraelA forum thread claims to distribute a full leaked database of Israeli passports and national identity documents. If authentic, exposure of passport and ID data enables identity fraud, impersonation and targeted attacks against citizens and officials. Defenders should verify the claim and watch for reposts or resale of the dataset.