BRIEFLeakhighP68
Bank of America database with 792k records up for sale
Bank of America
Detected29 September 2026 · 21:07 UTC
A seller on the DarkForums marketplace is offering a database allegedly tied to Bank of America containing roughly 792,000 lines, posted 26 September 2026. If authentic, it would expose customer PII and banking credentials usable for fraud, account takeover and credential-stuffing. Financial-sector defenders should verify exposure and watch for misuse of the listed data.
CategoryLeak
Severityhigh
Priority score68
Detected29 September 2026 · 21:07 UTC
Leak● 32
Rehost de subconjunto de 7.9M de credenciales de ParkMobileAn actor rehosted a 7.9M email:password subset reportedly taken from ParkMobile's 21.9M-record breach. The data comes from a well-known older incident, so this is not a fresh compromise, but it remains useful for credential-stuffing and phishing against affected users. Treated as stale; low priority for immediate alerting.Leak● 30
Base de datos de usuarios de webgirl.vc filtrada en un foroA database belonging to the site webgirl.vc has been posted for download in the DarkForums leak section, minutes before this collection. If it holds account credentials and user records, it would enable credential stuffing and extortion against its user base. It is a fresh but low-profile leak for most defenders.Leak● 54
Filtración de datos del Ministerio de Infraestructuras de ItaliaDocuments and data from Italy's Ministry of Infrastructure and Transport flood-risk reduction system (SISTEMA DI RIDUZIONE RISCHIO ALLAGAMENTO) have been posted to a leak forum. Exposure of critical-infrastructure planning material eases reconnaissance and physical or cyber targeting of public-safety systems. It matters as a government-sector leak even though it falls outside Latin America.Leak● 58
Base de datos de 486M de contactos B2B de Apollo.io a la ventaA roughly 486 million record global B2B contact database attributed to lead-generation platform Apollo.io is being offered for sale on BreachForums. It contains business emails, names and company data that enable highly targeted phishing, credential stuffing and account-takeover attempts. Defenders should treat it as a fresh, large corpus of corporate targeting data.Leak● 22
Filtración de datos de múltiples operadores de telecomunicaciones (2023)A forum post aggregates leaked data from several telecom operators, a sector that is critical infrastructure. Such data enables SIM-swap, account takeover and subscriber targeting. However the post dates from 2023, so it is not a fresh alert and should be treated as background intelligence.Leak● 48
Filtración de base de datos de 235.000 registros de mckln.edu.hkThe ANKA team of TurkHackTeam posted a 235,000-record database leak from mckln.edu.hk, a Hong Kong educational institution. Student and staff personal data are likely included, including names and contact details. It matters as evidence of ongoing hacktivist-style bulk data dumping.