BRIEFLeakhighP47
31 GB database of Turkish betting site Cenabet
Cenabet
Detected23 September 2026 · 15:51 UTC
A 31 GB database attributed to Cenabet, a Turkish betting platform, is being redistributed on a hacking forum. Betting databases typically hold user accounts, credentials and payment data at scale. Large, but Turkey-focused, so mainly relevant for credential-reuse and KYC/AML monitoring.
CategoryLeak
Severityhigh
Priority score47
Detected23 September 2026 · 15:51 UTC
LeakPriority 50
Filtración de datos del Instituto de Tecnologías Espaciales de PakistánOn November 7, 2026, forum user Ixnovor posted a leak attributed to Pakistan's Institute of Space Technologies on DarkForums. A space/defense-adjacent government institute being targeted is notable for its potential exposure of staff and project data. It is outside the LATAM scope but represents a fresh government-sector leak of interest to CTI teams tracking space and defense supply chains.LeakPriority 58
Filtración de 6 millones de registros de hogares de ChinaA forum user (Quarbivas) posted a 6-million-record dump of Chinese household registration (hukou) data on DarkForums on November 7, 2026. This type of government identity data — names, national IDs and addresses — is high-value for identity fraud and targeting. It falls outside the LATAM focus but is a genuine large government data leak worth tracking.LeakPriority 30
Combolist de credenciales de Perú con 48.000 registrosA 48,000-line email:password combolist tagged for Peruvian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a specific breach, but may contain valid .pe corporate or government logins. Peruvian defenders should screen for domain exposure and reset any matches.LeakPriority 30
Combolist de credenciales de Colombia con 51.000 registrosA 51,000-line email:password combolist tagged for Colombian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a targeted breach, but may contain valid .co corporate or government logins. Colombian defenders should check for domain exposure and reset matched accounts.LeakPriority 40
Volcado de 507 MB de logs de infostealer con credenciales frescasA 507 MB URL:login:password dump generated from infostealer logs dated 5 November 2026 was posted on Cracked.st as fresh 'VIP' material. It aggregates credentials from many victims rather than a single organization, so its value depends on matching your monitored domains. Defenders should screen the dump for their domains and reset any exposed accounts promptly.LeakPriority 35
Combolist de credenciales de México con 74.000 registrosA 74,000-line email:password combolist tagged for Mexican domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a breach of a specific organization, but it may contain valid .mx corporate or government logins. Defenders in Mexico should screen for domain exposure and force resets on any matches.