BRIEFLeakhighP72
Gemini.com database of 5.3M users for sale
Gemini.com
Detected15 October 2026 · 13:56 UTC
A threat actor claims to be selling a 5.3 million-record database tied to Gemini.com, a major cryptocurrency exchange. If genuine it would include customer PII and account data, carrying high risk of account takeover and phishing. The exchange and its users should verify and rotate credentials immediately.
CategoryLeak
Severityhigh
Priority score72
Detected15 October 2026 · 13:56 UTC
Leak● 52
Filtración de base de datos de la firma argentina Abaco InformáticaA freshly posted DarkForums thread (minutes old) advertises a database allegedly belonging to the Argentine company abaco-informatica.com.ar. The dump could contain customer records or corporate credentials for a named Argentine organization. Defenders should validate the data and watch for credential reuse against related accounts and partners.Leak● 74
Filtración de 5,8 TB del puerto seguro mexicano (PSI)A threat actor on DarkForums is offering 5.8 TB holding 16.5 million confidential documents allegedly from Mexico's Smart Secure Port (PSI). Port, customs and logistics records are critical infrastructure, so trade, operational and personnel data may be exposed. Mexican authorities and LATAM defenders should verify the breach and prepare for follow-on fraud or extortion.Leak● 50
Filtración de pedidos de la cartera cripto Bitbox.swissOrder data from Bitbox.swiss, a Swiss hardware crypto-wallet vendor, is being dumped on a forum. Hardware-wallet customers are high-value targets, so order records (names, addresses, purchases) enable targeted phishing and even physical attacks. Buyers of those devices should be warned.Leak● 58
Filtración de 6M de móviles alemanes con fecha de nacimientoA dataset of roughly 6 million German mobile numbers paired with dates of birth is circulating on a hacking forum. This PII combination enables identity fraud, SIM-swap targeting and credential-stuffing at scale. German telecom customers and anti-fraud teams should treat it as a fresh, high-value leak.Leak● 56
Base de datos de inversores cripto de España a la ventaA threat actor is advertising a freshly compiled database of Spanish cryptocurrency investors on a dark web forum. This kind of targeted dataset enables phishing, SIM-swap and account-takeover campaigns against high-value individuals. Spanish crypto and financial-sector defenders should watch for downstream fraud and credential abuse.Leak● 52
Filtración masiva con 1,1 millones de perfiles de pacientes en EE. UU.A BreachForums seller is offering a database of 1.1 million US patient profiles, a large healthcare data breach. Medical records are highly sensitive and drive insurance fraud, identity theft and targeted phishing against patients and providers. The victims are in the US, so regional priority is lower, but the scale warrants monitoring of downstream abuse.