BRIEFLeakhighP48
Customer database of 65,000 from Zimbabwe SPAR store for sale
spar.co.zw
Detected26 September 2026 · 16:16 UTC
A vendor is selling a customer database of about 65,000 records from the Zimbabwean online store spar.co.zw, a real retail organization. The data reportedly includes customer PII that can feed phishing, fraud and credential-stuffing attacks against those individuals. It is a confirmed breach of a named company but outside the LATAM region, lowering its priority for a regional operator.
CategoryLeak
Severityhigh
Priority score48
Detected26 September 2026 · 16:16 UTC
LeakPriority 46
Presunta filtración de base de datos de la firma de seguridad ADTA BreachForums thread claims a database breach of ADT, Inc., a large US home-security and monitoring provider. Data from a security vendor can expose customer accounts, addresses and monitoring details that enable fraud or physical targeting. The scale and date are not visible, so treat it as an unverified claim, but flag it given the victim's role in physical security.LeakPriority 56
Base de datos de 10 GB del banco brasileño Sicoob a la ventaAn xReactor thread offers a roughly 10 GB database attributed to Sicoob, a major Brazilian financial cooperative system. A data set of this size from a banking institution can include customer PII, account and contact data useful for fraud and targeted campaigns. It sits in a long, multi-page thread, so freshness is uncertain, but the target is high-value financial infrastructure in Latin America.LeakPriority 82
Base de datos de la entidad financiera Sagrario de EcuadorA threat actor posting as 'Pheisito' published a database belonging to Sagrario, a financial entity in Ecuador, on the DarkForums leak section. A leaked financial-sector database can expose customer PII, account details and internal records, fueling fraud, account takeover and targeted phishing against clients. Because it involves an Ecuadorian banking institution and appears freshly posted, it warrants immediate verification.LeakPriority 48
Filtración de datos de clientes de 268 hoteles en FranciaA client file covering 268 hotels in France was posted for download on DarkForums on November 10, exposing guest records and contact data. Such hospitality datasets are valuable for phishing, payment fraud and targeted attacks on travelers and corporate accounts. Because the post is fresh, the affected hotels should assess the exposed data and notify customers under GDPR.LeakPriority 40
Filtración de la base de datos de 7,7 millones de ArmorGamesA plaintext email:password dump of 7.7 million lines attributed to gaming platform ArmorGames is circulating on the Niflheim forum. Since the credentials are exposed in clear text, they enable immediate credential-stuffing and account takeover against affected users. The thread appears to be a repost of an older breach, so it is partially stale but still actionable for password-reuse risk.LeakPriority 27
Filtración de datos biométricos de Shakira y Sofía VergaraA DarkForums thread offers biometric data of Colombian artists Shakira and Sofía Vergara, including documents and images. Although celebrity-focused, it shows leakage of sensitive biometric identifiers that cannot be reset, raising impersonation and privacy risks. Colombian entities handling biometrics should review protections.