BRIEFLeakhighP60
China Mobile database of 850M users offered for sale
China Mobile
Detected21 September 2026 · 03:37 UTC
Reposts collapsed2
A seller is offering a database of over 850 million unique China Mobile records, a telecom and payments dataset. If authentic, it would rank among the largest telecom leaks and enables SIM-swap, fraud and account takeover at massive scale. Its size and telecom focus make it relevant to defenders tracking credential reuse and downstream fraud.
CategoryLeak
Severityhigh
Priority score60
Detected21 September 2026 · 03:37 UTC
Leak● 50
Base de datos de clientes de Phonehouse España a la ventaA consumer database attributed to the Spanish electronics retailer Phonehouse.es was posted for sale on DarkForums by user WSdatabase as a '2026' dataset. Customer records like these fuel phishing and account-takeover campaigns against Spanish consumers. Phonehouse and Spanish defenders should assess authenticity and notify affected customers.Leak● 55
Venta de datos de ciudadanos argentinos con DNI y correo electrónicoA seller on DarkForums is offering leads of Argentine citizens combining national ID (DNI) numbers with email addresses. DNI is a core identity document in Argentina, making the data valuable for account takeover and social engineering. Organizations serving Argentine users should watch for identity and credential abuse.Leak● 71
Filtración de base de datos del gobierno de São Paulo, Brasil, con 200.000 registrosA 200,000-record database tied to the São Paulo state government (SP.GOV) was published on DarkForums including names, CPF, phone numbers and emails. CPF is Brazil's national taxpayer ID, so the leak raises identity-theft and fraud risk for affected citizens. Brazilian public-sector teams should confirm the exposure and monitor for misuse of the data.Leak● 80
Filtración de base de datos del gobierno de Coahuila, México, con 2 millones de registrosA database attributed to the Mexican state government of Coahuila, reportedly around 2 million records, was posted for download on DarkForums by user SUB-ZER0. Citizen data at this scale can enable identity fraud, phishing and targeting of state services. Mexican public-sector defenders should verify the claim and watch for leaked personal records.Leak● 64
Base de datos de Serasa Experian (Brasil) publicada con enlace de descargaA user on DarkForums (Olyndakron) has republished a Serasa Experian Brazil database with a working download link. Serasa is Brazil's largest credit bureau, so any dataset of consumer credit and identity records carries very high sensitivity. The content may be a re-post of an older breach, but given the scale and financial-sector impact it still warrants verification by Brazilian defenders.Leak● 78
Filtración de 3,6M de registros de negocios y transacciones de IziPay PerúA dataset advertised on DarkForums claims to contain 3.6M+ business and transaction records from IziPay, a Peruvian payment gateway. If genuine, this exposes merchant identities and payment/transaction metadata for a large share of Peru's card-accepting merchants. Payment-processor data is high-value for follow-on fraud and poses real risk to Peruvian financial-sector defenders.