PULSE
FEED
ransomanubis reclama a Cuomo LLCransompanzer reclama a Grupa ABS · PL · Otherransomorova reclama a IE & E Industries · US · Manufacturingransomn0n reclama a Expedia Group, Inc. · US · Hospitalityransomlockbit5 reclama a starmark.co.th · TH · Retail & E-Commerceransomlockbit5 reclama a grupotelles.com · BR · Manufacturingransomlockbit5 reclama a yatra.com · IN · Hospitalityransomlockbit5 reclama a sunclinicallaboratories.com · US · Healthcareransombarracuda reclama a ADG Blatt · DE · Otherransomdeadlock reclama a Fidex · MXransomdeadlock reclama a NoseTea · US · Retail & E-Commerceransomdeadlock reclama a Coopebis · CR · Agriculture and Food Productionransomakira reclama a Calmont Wire & Cable · CA · Manufacturingransomeclipse reclama a globalair.com.sg · SG · Transportationransomanubis reclama a Cuomo LLCransompanzer reclama a Grupa ABS · PL · Otherransomorova reclama a IE & E Industries · US · Manufacturingransomn0n reclama a Expedia Group, Inc. · US · Hospitalityransomlockbit5 reclama a starmark.co.th · TH · Retail & E-Commerceransomlockbit5 reclama a grupotelles.com · BR · Manufacturingransomlockbit5 reclama a yatra.com · IN · Hospitalityransomlockbit5 reclama a sunclinicallaboratories.com · US · Healthcareransombarracuda reclama a ADG Blatt · DE · Otherransomdeadlock reclama a Fidex · MXransomdeadlock reclama a NoseTea · US · Retail & E-Commerceransomdeadlock reclama a Coopebis · CR · Agriculture and Food Productionransomakira reclama a Calmont Wire & Cable · CA · Manufacturingransomeclipse reclama a globalair.com.sg · SG · Transportation
Kalir Brief · Item24 September 2026 · 03:51 UTC
BRIEFLeakhighP68

PaidWork database with 22M users for sale

PaidWork.com

Detected24 September 2026 · 03:51 UTC
Why it matters

A 22 million-user database from the freelance platform PaidWork.com is being offered for sale on BreachForums, reportedly including names and full user details. The scale is significant, 22M accounts, enabling credential stuffing, phishing and identity theft against a global user base. No confirmed regional focus, but the size makes it a high-value leak to watch.

MetadataRECORD
CategoryLeak
Severityhigh
Priority score68
Detected24 September 2026 · 03:51 UTC
Related items6
LeakPriority 88
Base de datos interbancaria argentina con 804.000 cuentas a la ventaA BreachForums seller is offering a 'first-hand' Argentine interbank feed of 804,000 bank-account records spanning 56 banks, allegedly exposing customer identity and account data. If genuine, it enables fraud, account takeover and convincing social engineering against account holders nationwide, and provides an entry point for probing bank infrastructure. Argentine financial institutions should verify exposure against the sample and monitor for abuse of their customers' data.
13h
LeakPriority 64
Filtración de base de datos de la agencia de viajes Hurb (4,8 millones)A 4.8 million-record dump attributed to Hurb, a Latin American online travel company, is being circulated as a database combo on BreachForums. The scale suggests customer account and contact data that can fuel credential stuffing and phishing. Regional travel and e-commerce firms should check exposure and watch for reused credentials.
14h
LeakPriority 76
Filtración de datos del Sivigila del Instituto Nacional de Salud de ColombiaA dataset of 46,572 records linked to Sivigila, Colombia's public health surveillance system run by the Instituto Nacional de Salud, was published on DarkForums. Health-sector records can expose patient and staff data and support targeted phishing against public health entities. Colombian authorities should assess the exposure and trace the leak's source.
14h
LeakPriority 86
Base de datos interbancaria de Argentina a la venta (804.000 registros)A threat actor is selling a firsthand 'Argentina interbank feed' with 804,000 bank-account records spanning 56 banks, listed on BreachForums. Data of this type enables account takeover, fraud and targeted phishing against bank customers and staff. Argentine financial institutions should treat it as a high-priority exposure and monitor for fraudulent activity.
14h
LeakPriority 66
Base de datos de 654 mil usuarios de Voyce.me a la ventaA seller on BreachForums (bf.st) is offering a database allegedly containing 653,901 user records and roughly 34,000 emails belonging to Voyce.me, a US-based interpretation-services platform used by healthcare and enterprise clients. The data reportedly includes account and contact details that can fuel credential-stuffing, phishing and account-takeover attempts. Because Voyce handles sensitive interpretation traffic for organizations, exposed user credentials pose a downstream risk to its business customers.
15h
LeakPriority 42
Base de datos de la colombiana Mueble Jamar a la ventaA BreachForums 'Leaks Market' thread advertises a database belonging to Mueble Jamar, a Colombian furniture retailer, for sale. The posting is thin on details, but a customer or operational database of a real LatAm company can enable phishing, order fraud and account takeover against customers. Worth tracking for confirmation of scope and record count.
16h