BRIEFLeakhighP55
Ledger customer database (309,000 records) for sale
Ledger
Detected18 September 2026 · 20:12 UTC
An actor is offering a database of about 309,000 Ledger customer records allegedly stolen in 2026, including personal and contact data of crypto wallet users. Such data feeds phishing, SIM-swap and physical-extortion campaigns against high-value crypto holders. Defenders and crypto users should treat it as a fresh, actionable exposure even if the exact provenance needs verification.
CategoryLeak
Severityhigh
Priority score55
Detected18 September 2026 · 20:12 UTC
Leak● 47
Filtración gratuita de datos de la aerolínea Plus Ultra (Venezuela y España)A thread titled 'FREE Plus Ultra Airlines Venezuela Spain and Latin America' was published on DarkForums, indicating a giveaway of data tied to the Spanish carrier that operates routes across Venezuela and Latin America. The content is behind a login wall, so record volume and whether it is customer, booking or loyalty data remain unconfirmed. Airline passenger data is directly usable for phishing, loyalty-account takeover and travel-payment fraud against regional travellers.Leak● 54
Base de datos de 125 GB con números de Seguridad Social de EE. UU. a la ventaA 125 GB dataset advertised as a US Social Security Number database is being offered on DarkForums (thread 119697); the listing is login-walled, so the true record count and freshness cannot be verified. SSN-level records remain the single most reusable identity-fraud primitive, enabling credit fraud, tax fraud and account takeover at scale. Defenders should treat it as a probable repack of previously breached US data unless sampling proves otherwise.Leak● 52
Filtración de base de datos de la tienda online surcoreana MetreeA 2026 database sample from the South Korean e-commerce site metree.co.kr is being traded on DarkForums, indicating customer order and account records are in circulation. Merchant and Korean retail defenders should validate the sample against internal records and prepare for credential-stuffing and fraud attempts against shoppers.Leak● 78
Base de datos de Binance de 335 millones de registros a la ventaSeller 'darkleaks' on DarkForums advertises a 335-million-record Binance dataset posted 1 Nov 2026, offering samples to prospective buyers. If genuine, it exposes customer KYC, contact and trading data at scale, feeding phishing and account-takeover campaigns against crypto users and exchange staff.Leak● 32
Colección KYC de Alphaex con 15.000 pasaportes y licenciasAn xReactor thread offers roughly 15,000 KYC documents — passports and driving licences — tied to Alphaex customer accounts. The thread sits deep in pagination (page 46), indicating the dump is old and previously circulated rather than a fresh breach. It remains useful for identity-fraud and KYC-verification abuse detection, but is not a fresh alert.Leak● 58
Presunta filtración de documentos y datos de usuarios de BinanceA DarkForums thread (ID 120196) advertises a 2026 leak of Binance internal documentation and customer/user data, though the content is login-walled and unverified. If authentic, it would expose account and possibly KYC data of a major global crypto exchange, fuelling fraud, account takeover and downstream credential abuse. Exchanges and their customers should treat this as a watch item until the dump is confirmed.