BRIEFLeaklowP36
AT&T 70 million record database posted on underground forum
AT&T
Detected19 October 2026 · 17:39 UTC
A forum post offers a 70 million record AT&T database, a very large telecom dataset likely containing customer PII. The post is dated February 2026 and the underlying AT&T data is widely known and recycled, so it is not a fresh breach. It still matters for PII exposure and fraud monitoring but is not an actionable new alert.
CategoryLeak
Severitylow
Priority score36
Detected19 October 2026 · 17:39 UTC
Leak● 80
Base de datos de la ANT y MTOP de Ecuador a la venta con 861.174 identidadesA seller on BreachForums claims to have fully exfiltrated Ecuador's national transport database (ANT/MTOP), covering roughly 861,174 identities. The data would include citizen identity, licensing and vehicle records held by two government bodies, exposing drivers and vehicle owners to fraud and identity theft. Defenders in Ecuador should treat the dataset as public, verify the scope with the agencies and prepare notification and credential-abuse monitoring.Leak● 34
Combolist de 13,4 millones de credenciales URL:LOG:PASS difundidoA freshly dated combo list of roughly 13.4 million URL:login:password entries was released publicly. It is a generic credential dump rather than a single-organization breach, but at this scale it is valuable for credential stuffing against corporate VPNs, email and SaaS portals. Defenders should watch for password reuse and force resets on exposed accounts.Leak● 45
Filtración de base de datos de la autoridad gubernamental SHENA de BaréinA threat actor has posted a database belonging to Bahrain's Safety, Health and Environment National Authority (SHENA), a government regulator, on the Spear Leaks forum. Exact record counts and fields sit behind the listing, but regulator data typically exposes internal staff accounts, emails and contact records that fuel targeted phishing against civil servants. Defenders watching Gulf government exposure should track it for downstream credential abuse.Leak● 40
Filtración de la base de datos inmobiliaria de MykukunThe breach forum lists a leaked database from Mykukun, a real-estate data and analytics provider. Real-estate professional account data can be leveraged for business email compromise and targeted phishing. Smaller scale but still relevant for monitoring credential reuse.Leak● 48
Filtración de base de datos de clientes de Spytec GPS con 131.000 registrosA customer database of GPS-tracking vendor Spytec containing about 131,000 records is listed on a breach forum. Tracking-service customer data can expose physical-location and contact details, aiding stalking and fraud. It is a moderate-size leak worth monitoring for reused credentials.Leak● 52
Base de datos de Hallmark con 8 millones de registros a la ventaA dataset of roughly 8 million records labelled Hallmark is offered for download on a breach forum, suggesting a large customer or account database leak. At that scale it enables credential stuffing and targeted phishing against the brand and its partners. Defenders should check for reuse of corporate accounts in the dump.