BRIEFLeakhighP44
482,000 Qoo10 Singapore customer records for sale
Qoo10 Singapore
Detected11 September 2026 · 21:12 UTC
A listing offers 482,000 customer records from the Singapore e-commerce site qoo10.sg, including emails, phone numbers and addresses. The dataset supports large-scale phishing, smishing and account takeover against real shoppers. E-commerce and retail defenders should treat it as a reminder that contact-heavy customer data is a high-value target.
CategoryLeak
Severityhigh
Priority score44
Detected11 September 2026 · 21:12 UTC
Leak● 25
Supuesta base de datos de Instagram con 17 millones de registrosA forum offers an 'Instagram leaked database 17 million' dataset, a large but likely recycled file; the well-known Instagram scrape of this size dates from years ago. No fresh date appears, so it is not a new-breach alert. It is only useful for checking whether your users' emails surface in credential-stuffing lists.Leak● 38
Filtración de 261.000 usuarios de Adele.org (Francia)A database of 261,000 records from the French student-housing platform Adele.org is being shared. It reportedly contains personal data such as names, contacts and housing details of students, enabling fraud and targeted phishing. Although outside Latin America, it shows how housing and education platforms remain attractive breach targets.Leak● 40
Base de datos del sitio CraveOnline.co.uk publicada en foroA database attributed to the UK entertainment site CraveOnline.co.uk has been posted for sharing on a leak forum. The post claims account data from the site, which enables credential reuse and phishing against its users. Such leaks matter because reused passwords often unlock corporate and government accounts elsewhere.Leak● 55
Base de datos de 1,7M de clientes de la criptobolsa Nexo a la ventaA thread on xReactor advertises a database of 1.7 million records tied to crypto platform Nexo (nexo.com), a real digital-asset lender. If authentic it likely exposes customer emails, identities and possibly KYC/financial data usable for phishing and account takeover. The post date is unknown, so treat as unverified; financial and crypto defenders should monitor for credential reuse and impersonation.Leak● 92
Base de datos de la Policía Nacional del Ecuador ofrecida en foro clandestinoAn actor (Synq1xxs) posted a database attributed to Ecuador's National Police, minutes after posting. If authentic it would expose personnel, contact and possibly operational records of a national law-enforcement agency, enabling targeted phishing, identity impersonation and follow-on intrusion. This is a direct government/national-security matter for Ecuador and the region and should be verified and contained urgently.Leak● 42
Base de datos de JKAmaret filtrada y publicada para descargaA post claims a full database belonging to JKAmaret has been leaked and is offered for download. If genuine, it exposes the organization's user or customer records to fraud and credential abuse. Impact depends on the entity's size and the sensitivity of the data, so it ranks low but is worth tracking.