BRIEFLeaklowP42
1win database of 96.5 million users exposed
1win
Detected29 October 2026 · 13:24 UTC
A claimed 96.5 million-user database for the betting brand 1win, dated November 2024, is being redistributed on DarkForums with working download mirrors. The scale is large and may include emails, credentials and account details reused elsewhere. The data is not fresh, so it is a useful exposure reference rather than a live alert.
CategoryLeak
Severitylow
Priority score42
Detected29 October 2026 · 13:24 UTC
Leak● 38
Base de datos de 1,8 millones de ciudadanos mexicanos (2023)A file labelled as a 1.8 million-record Mexican citizen database, dated 2023, was reposted to DarkForums on 29 October 2026. It likely contains personal identifiers such as names, IDs and contact data useful for identity fraud and phishing against Mexican residents. The data is old, making this a background exposure item rather than a fresh breach.Leak● 40
Base de datos del dominio bdv.fr publicada en DarkForumsA database tied to the domain bdv.fr was posted to the DarkForums databases section on 29 October 2026, with the size and record count not shown in the visible text. Because 'bdv' matches well-known banking brands, the leak should be triaged quickly to determine whether it involves a financial institution. Content and scope remain unconfirmed.Leak● 66
Base de datos de seguridad nacional de Irak filtrada para descargaA dataset described as Iraq's national security database was posted for public download on DarkForums on 29 October 2026. If authentic, a leak of government security records could expose personnel, operations or citizen data and enable targeted follow-on attacks and extortion. It is the most sensitive fresh government-data item in this batch.Leak● 38
Filtración de código fuente de varios sitios web de Emiratos Árabes UnidosA DarkForums user (Polbiutov) claims to have leaked the source code of several UAE-based websites. The specific operators and sensitivity of the affected sites are not stated, so impact is unclear. Source-code exposure can reveal API keys, database schemas and logic flaws exploitable for follow-on intrusion; relevant mainly if any of the sites are government or critical services.Leak● 48
Filtración de archivos de la Policía de Bangladés en DarkForumsA DarkForums actor (Zanrorix) has posted a leak of allegedly internal Bangladeshi Police files. The scope is not fully described in the thread, but any leak of law-enforcement records can expose officers, informants, cases and citizen PII. Even outside Latin America it matters for regional CTI because stolen police datasets frequently resurface in identity-fraud supply chains.
Leak● 82
Base de datos de ANSES Argentina a la venta en BreachForumsA BreachForums actor is advertising a full database allegedly belonging to ANSES, Argentina's national social security administration, which holds identity, employment and benefit records for millions of citizens. If genuine, this is a high-value government leak enabling identity fraud, targeted phishing and credential abuse against public services. The post date is not visible, so the dataset's freshness and completeness should be verified before public alerting.