BRIEFLeakhighP62
CenterPoint Energy (Texas) database with 3 million rows
CenterPoint Energy
Detected16 September 2026 · 08:12 UTC
A 3,093,459-row database attributed to CenterPoint Energy, a major Texas electric and gas utility, is being offered on BreachForums. Utility customer and operational data can enable billing fraud and reconnaissance for attacks on critical energy infrastructure. Energy-sector defenders should verify the exposure and warn affected customers.
CategoryLeak
Severityhigh
Priority score62
Detected16 September 2026 · 08:12 UTC
Leak● 22
Venta de base de datos del hosting israelí Aurion-HostingA DarkForums seller (chuu) listed the database of Israeli hosting provider aurion-hosting.co.il for sale, with the post dated June 13, 2025. The data is now well over a year old and the target is a small regional host outside the AR/LATAM focus, so it is stale rather than a fresh alert. It could still contain customer PII and account credentials useful for downstream attacks.Leak● 44
Base de datos de 1 millón de cuentas de Instagram de EE.UU. a la ventaA DarkForums user (Darhokin) posted on October 31, 2026 a claimed database of roughly one million US Instagram accounts. If authentic it exposes consumer credentials and profile data for US-based users rather than any government or critical-infrastructure entity. Defenders should treat it as a credential-stuffing and account-takeover risk, especially where passwords are reused.Leak● 42
Muestra de datos filtrados de AT&T publicada en DarkForumsDarkForums user Yiryupik posted an 'AT&T Leaked Sample' on 31 October 2026, offering only a fragment of records rather than a full dataset. Such samples are often recycled from previously reported telecom breaches, so novelty is uncertain. It still warrants checking whether the records are new, as telecom data feeds SIM-swap and account-takeover fraud.Leak● 50
Archivo de filtraciones 2026 de ShinyHunters ofrecido en foro onionAn onion forum thread (login-walled, content unreadable) advertises a 'Database 2026 Leaks Archive of ShinyHunters'. If genuine, it aggregates multiple 2026 breach datasets attributed to a prolific group, which is valuable for mapping exposure across victims. The post could not be verified and no date or victim list is visible, so treat it as an indicator rather than a confirmed leak.Leak● 58
Venta de bases de datos españolas con dominio .esDarkForums user Finqadar posted on 31 October 2026 a sales thread for 'Spain .es databases', offering one or more datasets tied to Spanish domains. If the content is genuine it would affect Spanish organisations and their customers, with credentials and personal data usable for fraud. Detail is limited, so scope and authenticity must be verified before escalation.Leak● 64
Filtración de 10 GB de datos internos de NestléDarkForums user Qeltoxer posted on 31 October 2026 a thread advertising 10 GB of Nestlé data. Ten gigabytes is enough to include internal documents, supplier records or employee information rather than a trivial sample. Multinational food-supply data is also relevant to supply-chain and business-partner defenders in the region.