BRIEFLeakhighP57
Database of 3.9M Israeli citizens offered for sale
Detected23 October 2026 · 00:36 UTC
A 3.9 million-record dataset of Israeli citizens' personal data is being offered on DarkForums. The scale indicates a large PII leak likely enabling identity theft, phishing and account takeover. Relevant to fraud and KYC teams even though the source organization is unidentified.
CategoryLeak
Severityhigh
Priority score57
Detected23 October 2026 · 00:36 UTC
Leak● 52
Filtración de documentos confidenciales internos de FerrariInternal confidential documents and datasheets belonging to Ferrari are being shared for download on DarkForums. Leaked engineering and commercial material can aid corporate espionage, supplier targeting and tailored phishing. The high-profile brand raises lure risk for employees and partners.Leak● 62
Filtración de la base de datos del National Bank of PakistanA database attributed to the National Bank of Pakistan, a state-owned financial institution, is being shared on DarkForums. If authentic, the exposure affects banking customers and internal records, a serious sector breach. Watch for credential reuse and fraud against account holders.Leak● 65
Base de datos y CRM del sistema de pagos PaySysLabs a la ventaA CRM and database belonging to PaySysLabs, described as Pakistan's instant payment system, is being advertised for sale. Compromise of a payment platform exposes merchant and transaction records and enables downstream fraud. Financial-sector defenders should treat this as a priority lead for abuse monitoring.Leak● 48
Base de datos de clientes del bróker Avatrade (España) a la ventaA seller listed a Spain-focused Avatrade customer database on 19 October 2026 on a leak forum. Trading-platform customer data usually includes identity documents, contact details and account information valuable for financial fraud and account takeover. The brokerage and Spanish financial authorities should confirm scope, notify affected clients and watch for credential-stuffing against client portals.Leak● 50
Doxeo del director del IMSS, Zoé Robledo AburtoA fresh dox thread targets Zoé Robledo Aburto, director of Mexico's IMSS, published within minutes of collection. Such releases typically bundle personal identifiers, contact data and sometimes credentials, which fuel social engineering and phishing against a senior health-sector official and his institution. Mexican public-health entities should brief the official's team and monitor for credential exposure.Leak● 85
Base de datos del Gobierno de Colombia ofrecida en ventaA threat actor posted on 19 October 2026 a claimed Colombian government database on a major leak forum. The agency and record count are not yet confirmed, but any dump of citizen or official data from a national government enables phishing, impersonation of public entities and credential reuse against .gov infrastructure. Colombian public entities should verify exposure, rotate privileged credentials and monitor for follow-on access sales.