BRIEFLeakhighP70
Bol.com customer database with 26 million records for sale
bol.com
Detected2 October 2026 · 07:45 UTC
A seller is offering a 26-million-record bol.com (Dutch e-commerce) database on DarkForums, posted 27 Sep 2026. It exposes customer PII such as names, addresses, emails and possibly hashed credentials, enabling credential stuffing and targeted phishing. Though outside the region, it is one of the largest recent retail leaks and worth monitoring for downstream fraud and credential reuse.
CategoryLeak
Severityhigh
Priority score70
Detected2 October 2026 · 07:45 UTC
Leak● 42
Colección de datos de China: educación, telecomunicaciones, banca y logísticaA collection claiming Chinese data from education, telecom, banking and logistics sectors is posted for distribution. If authentic, it aggregates multiple industry datasets that can fuel credential stuffing, fraud and targeting of Chinese organizations. The date and provenance are unclear, lowering its immediate alerting value for regional defenders.Leak● 52
Base de datos 2026 de Star Health Insurance (India) a la ventaA seller is offering a 2026 database belonging to Indian health insurer Star Health Insurance. Health insurance data typically contains policyholder identities, contact details and medical/financial information, enabling fraud, extortion and phishing. Health-sector data sales carry regulatory and patient-safety impact, though the victim is outside the region.Leak● 85
Filtración de base de datos de ciudadanos de Uruguay (DNIC, 5,8M registros)A database allegedly holding 5.8 million records of Uruguayan citizens tied to the Dirección Nacional de Identificación Civil is being circulated on a leak forum. It would expose national ID numbers, names and personal data, enabling identity fraud, credential abuse and targeted social engineering. Compromise of state identity data at national scale is a top-tier concern for Latin American defenders.Leak● 45
Base de datos de antecedentes de Indonesia (38.280 M registros) a la ventaA seller is advertising an aggregated Indonesian background-check dataset reportedly containing 38.28 billion records compiled from breaches over past years. Because it aggregates historical data, much is stale, but the scale re-exposes mass national PII usable for identity fraud and doxxing. Lower urgency than a fresh breach, yet relevant for identity and regional intelligence.Leak● 38
Filtración de base de datos del portal gubernamental tilang.pn-solok.go.idA database belonging to tilang.pn-solok.go.id, an Indonesian government (.go.id) domain, was reportedly leaked by the actor 'WAHSD'. Exposure of a public court-related system can reveal citizen and case data. The post is dated 2025, so it is stale and not a fresh alert, but remains relevant for historical exposure tracking.Leak● 70
Filtración de base de datos de Abaco Informática (Argentina)More than 300,000 records attributed to Abaco Informática (abaco-informatica.com.ar), an Argentine company, are posted for download on a leak forum. The dataset contains organizational data usable for fraud, targeted phishing or further intrusion. For a LATAM defender this is sensitive corporate PII that warrants verification and victim notification.