BRIEFLeakhighP45
4.2M-record personal database of Kazakhstan's daryn.online for sale
Daryn.online (Kazajistán)
Detected12 September 2026 · 10:12 UTC
A 4.2 million-record personal database allegedly belonging to the Kazakh digital-services platform daryn.online is being circulated for sale. Dumps of citizen personal data of this size feed identity theft, fraud and targeted phishing against a broad user population. Organizations that integrate or federate with the platform should review exposure and monitor for downstream abuse.
CategoryLeak
Severityhigh
Priority score45
Detected12 September 2026 · 10:12 UTC
Leak● 45
Base de datos del portal estatal ruso Gosuslugi ofrecida en foroUser DBHunter posted on DarkNetArmy a claimed 2025 database of gosuslugi.ru, Russia's unified government services portal used for benefits, tax and identity functions. If authentic, the records enable credential stuffing and identity fraud against a state platform, and reveal exposure patterns relevant to any public-sector identity service. The post is roughly seven weeks old and the underlying data is dated 2025, so it is not a fresh alert.
Leak● 48
Filtración de datos del gobierno de Pamekasan (go.id), IndonesiaForum member SUB-ZER0 posted on the DarkNetArmy onion forum a leak of data tied to pamekasankab.go.id, the site of Indonesia's Pamekasan Regency government, marked as posted today. Regional government records typically contain citizen identifiers and internal staff data, making this a genuine government breach rather than carding noise. Defenders should verify the scope and whether the dataset is being redistributed.Leak● 58
Filtración de 300.000 clientes de OrionTelekom (Serbia)A threat actor is offering a 300,000-customer database belonging to Serbian telecom OrionTelekom (oriontelekom.rs), including a sample for verification. Telecom subscriber data enables SIM-swap, phishing and identity fraud against customers and staff. It is a serious leak for a named critical-infrastructure operator, even though it sits outside the LATAM region.Leak● 41
Filtración de datos del distrito escolar de GettysburgA BreachForums post claims a Gettysburg Area School District database with ~976 rows and 464 SSNs. Even a modest school-district leak exposes minors', families' and staff SSNs, enabling fraud and phishing. District IT should confirm the leak and notify affected families.Leak● 48
Filtración de datos municipales de Niagara Falls con 1.141 SSNA BreachForums post advertises Niagara Falls municipal data with ~1,844 rows and 1,141 SSNs. Municipal exposure of SSNs enables fraud and phishing against residents and city staff. City security teams should assess the claim and alert affected individuals.Leak● 52
Filtración de datos del condado de Garrett con 2.000 SSNA BreachForums database post claims Garrett County government data with ~2,542 rows and 2,083 SSNs. A county government holding resident and employee SSNs is an attractive target for fraud and further intrusion. Local security teams should confirm the exposure and warn residents.