BRIEFLeakhighP64
UnionPay database with 260M records offered for sale
UnionPay (China)
Detected29 September 2026 · 04:07 UTC
A DarkForums member is distributing a database with over 260 million UnionPay records including names, mobile numbers, dates of birth, ID card data, addresses and bank card numbers. If authentic, this is one of the largest financial PII leaks in circulation, enabling identity fraud, SIM-swap and large-scale payment fraud. Banking and payment defenders should treat the exposed cardholders as high-risk.
CategoryLeak
Severityhigh
Priority score64
Detected29 September 2026 · 04:07 UTC
Leak● 42
Nueva filtración de base de datos atribuida a UTEAA newly registered forum account posted a database labeled 'UTEA' minutes ago, suggesting a fresh dump of an as-yet unconfirmed organization. The target, region and record count are unclear, so real impact cannot be assessed yet. Analysts should confirm whether UTEA refers to a Latin American entity before escalating.Leak● 54
Base de datos de más de un millón de clientes de préstamos indonesios a la ventaA seller is offering a database of over one million customers of an Indonesian credit-loan firm with a 26-year track record. The records support targeted phishing, loan and identity fraud against a broad consumer base. Financial-sector defenders in the region should monitor and validate the exposure.Leak● 58
Filtración de 110 millones de credenciales URL:usuario:contraseñaA fresh stealer-log dump of roughly 110 million URL:login:password records was posted free on an onion leak forum dated today. The volume is significant and such lists fuel credential-stuffing, session hijacking and initial access across many organizations. No named victim, but defenders should ingest it for credential-exposure monitoring and password-reset campaigns.Leak● 90
Filtración de base de datos del Hospital Oncológico Austral (Argentina)A database belonging to Argentina's Hospital Oncológico Austral was posted on DarkForums within minutes of discovery. Health-sector leaks expose sensitive patient data (identities, diagnoses, contact details) with severe privacy and regulatory consequences. As a named Argentine healthcare target it fits critical-infrastructure criteria and should be escalated for verification and victim notification.Leak● 93
Base de datos de CLARO Argentina filtrada en foro clandestinoA threat actor published a database attributed to CLARO Argentina, one of the country's largest telecom operators, on DarkForums roughly two hours before discovery. Telecom data can expose subscriber records, internal accounts and infrastructure details useful for downstream SIM-swap, account takeover and network intrusion. This directly affects Argentine critical telecommunications infrastructure and warrants immediate verification and subscriber-notification planning.Leak● 40
Filtración de red del Broward College por ANKA TEAM (TurkHackTeam)TurkHackTeam (ANKA TEAM) claims to have hacked and leaked the virtual network system of Broward College in the United States. A leaked campus network dump can expose student and staff data and internal access details usable in follow-on intrusions. Although outside the region, defenders tracking re-used credentials and network data should note it.