BRIEFLeaklowP25
28 million US consumer database for sale
USA Consumer Optin
Detected18 September 2026 · 06:12 UTC
A seller offers a 28-million-record US consumer opt-in database for $200, likely containing names, emails, phones and addresses. Although the post dates from mid-2023 and the data has probably circulated already, its scale makes it valuable for phishing, fraud and account-takeover campaigns. Defenders should watch for reuse of these records in credential-stuffing and social-engineering against US consumers.
CategoryLeak
Severitylow
Priority score25
Detected18 September 2026 · 06:12 UTC
Leak● 40
Volcado de 740 GB de registros stealer y ULP publicadoA 740 GB archive of stealer logs and URL:login:password (ULP) data has been posted on RaidForums. Though published in January 2026, the sheer volume makes it a long-lived credential source for account takeover. Defenders should assume broad credential exposure and enforce resets and MFA.Leak● 60
Base de datos de la exchange de criptomonedas CoinSwitch a la ventaA partial database of crypto exchange CoinSwitch containing over 1 million lines with KYC data and account balances is being offered on RaidForums. KYC records are highly sensitive and fuel identity fraud and targeted phishing. Financial-sector defenders should monitor for downstream abuse of the leaked customer data.Leak● 50
Venta de cédulas y licencias de conducir de Costa RicaA seller is offering Costa Rican national ID cards, driver licenses and matching selfies, likely sourced from identity theft or a prior breach. This enables large-scale identity fraud, account opening and KYB/KYC bypass against Costa Rican citizens. Data appears to be posted around July 2026.Leak● 41
Base de datos de JobsGo filtrada y ofrecida para descargaA database belonging to the job platform JobsGo has been posted for download on BreachForums, exposing account and personal data of its users. Job-portal leaks are valuable for credential stuffing, recruitment fraud and targeted phishing because they hold employment and contact details. Affected users and partner organizations should reset credentials and monitor for abuse.Leak● 58
Base de datos de la mayor app de maternidad del sudeste asiático (21,6M)A threat actor is offering a 21.6 million-record database from Southeast Asia's largest parenting app, including pregnant women's names, national ID numbers and home addresses. The stolen PII enables large-scale phishing, identity theft and fraud against a vulnerable population. Organizations in the region should treat this data as compromised and warn affected users.Leak● 58
Filtración de la base de datos de pH Electrónica S.A. (Buenos Aires)A database belonging to pH Electrónica S.A., an industrial analytical instrumentation firm in Buenos Aires, has been posted for download. Although not a government body, it is an Argentine company whose customer and business data could feed phishing and invoice fraud. It is directly relevant to Argentine incident responders.