BRIEFLeaklowP44
Database of 53 million US emails posted
Detected16 September 2026 · 23:12 UTC
Reposts collapsed2
A fresh dump labelled 'USA 2026 53 MILLIONS EMAILS' was posted moments ago, offering tens of millions of US email addresses. Even without passwords, such volume supports mass phishing, credential-stuffing and BEC campaigns against downstream targets. Defenders should anticipate an uptick in email-based attacks referencing these addresses.
CategoryLeak
Severitylow
Priority score44
Detected16 September 2026 · 23:12 UTC
Leak● 52
Filtración de 49 GB de la base de datos de Alnair (EAU)A listing on the PwnForums onion site advertises a 49 GB dump of the Alnair (alnair.ae) database from the United Arab Emirates. At that volume the dataset likely contains large customer, transaction or operational records, giving fraudsters material for identity theft and business email compromise. Regional enterprises and the firm's clients should treat the data as compromised until proven otherwise.Leak● 55
Filtración de datos y código fuente de SangomaA DarkForums thread by N1KA offers a download of Sangoma.com data together with source code, spanning multiple pages of replies. Sangoma supplies VoIP gateways and PBX platforms widely used in enterprise and public-sector telephony, so source code disclosure raises supply-chain risk for telecom infrastructure. Organisations running Sangoma/FreePBX gear should assume deeper knowledge of product internals is now available to attackers.Leak● 58
Filtración de datos personales del Congreso de FilipinasDarkForums user Ilknorix posted on 30 October 2026 a PII leak attributed to the Congress of the Philippines, a national legislative body. Leaked personal data of legislators, staff and constituents enables targeted phishing, impersonation and pressure campaigns against public officials. Government entities in the region should treat this as a genuine public-sector exposure and monitor for weaponised data.Leak● 60
Base de datos del PT (Partido de los Trabajadores) de Arujá, BrasilA BreachForums database thread advertises a dump belonging to the Workers' Party (PT) branch in Arujá, São Paulo, Brazil. Political party records typically contain member lists, CPF numbers, addresses and contact details of activists and public figures, exposing them to doxxing and harassment. This is a politically sensitive leak in Latin America and could be reused for influence or intimidation campaigns.Leak● 64
Base de datos con datos personales de cosmotienda (México)DarkForums user Jaded published a thread advertising a Mexican PII database tied to cosmotienda, with a multi-page discussion indicating a downloadable dataset. The content points to personal data of Mexican customers, useful for fraud, phishing and account takeover schemes targeting the region. Mexican consumers and the retailer's partners should assume the data is in circulation until the dump is verified as fake or stale.Leak● 68
Base de datos de DIRNIC Perú a la venta en DarkForumsForum user DeadM4n posted a database belonging to DIRNIC Peru in DarkForums' Leaks/Databases section on 1 November 2026. The thread advertises a Peruvian entity's data for distribution, which suggests customer or citizen records that could fuel identity theft, phishing and account takeover against Peruvian users. Any Peruvian organisation or public body named DIRNIC, and its partners, should treat this as a live exposure until the sample is verified.