BRIEFLeakhighP68
Database of 88 million US records offered for sale
Detected12 October 2026 · 09:53 UTC
A forum user posted today a 'full info' database of 88 million US records in the premium section. The scale and same-day recency point to a fresh, monetizable dump rather than recycled data. US defenders should check whether their user or customer data is included and monitor for resale.
CategoryLeak
Severityhigh
Priority score68
Detected12 October 2026 · 09:53 UTC
Leak● 42
Filtración de 275.000 registros de la plataforma Double CounterA forum post advertises a 2026 leak of the Double Counter database containing roughly 275,000 records of Discord usernames and emails. Double Counter is a Discord verification service, so the data may tie accounts to email addresses used across many communities. It is a mid-size credential and PII exposure useful for targeted phishing, though limited in sectoral impact.Leak● 52
Base de datos de la fintech bangladesí Pathao publicada en un foroA threat actor published a database allegedly tied to Pathao, a major Bangladeshi ride-hailing and digital-payments firm, on a hacking forum. The dump's exact volume and fields are unverified, but such data typically includes user accounts and contact details. If authentic, it could fuel credential stuffing, fraud and account takeover across Pathao's large regional user base.Leak● 60
A la venta base de datos de 1.200 millones de registros atribuida a AT&TA freshly posted thread offers a database labeled as 1.2 billion records belonging to AT&T, the major US telecommunications carrier. The scale and telecom nature make it a high-value trove for SIM-swap, phishing and account-takeover campaigns if the data is genuine. Note that similar AT&T datasets have circulated before, so the dump may be recycled rather than new.Leak● 45
Venta de expedientes VIP de clientes de Pathao (Bangladesh)A seller advertises 'Pathao VIP Dossiers' with proof of access, referring to the major South Asian ride-hailing and fintech platform. This points to a real breach of passenger or customer records rather than marketing noise. It matters for fintech fraud and identity-theft monitoring across the region.Leak● 28
Filtración de base de datos del servicio Double CounterA fresh database leak titled 'Double Counter leak' was posted on DarkForums by a staff account, targeting the Double Counter Discord verification bot. Details of scale and data fields are not yet visible, and the affected service is not government or critical infrastructure. It is worth only peripheral tracking for Discord-community exposure.Leak● 46
Filtración de 92.000 registros de Yale University PressA 92,000-record database belonging to Yale University Press (yalebooks.yale.edu) has been posted on BreachForums with a public download link. It exposes the personal and likely credential data of the press's customer base. Although outside the AR-LATAM region, it is a named real organization and useful for credential-stuffing and phishing monitoring against educational-sector accounts.