BRIEFLeakhighP48
Russian Sovcombank bank customer database leaked
Sovcombank
Detected4 October 2026 · 19:55 UTC
A CSV dataset of roughly 131,000 rows from Russian bank Sovcombank is being distributed on DarkForums. The records appear to include customer account and contact details valuable for financial fraud. Although outside the LATAM region, it signals an active dump of a real bank and warrants monitoring for reuse against regional institutions.
CategoryLeak
Severityhigh
Priority score48
Detected4 October 2026 · 19:55 UTC
Leak● 34
Combolist dirigido de 597.299 cuentas de AmazonA large combolist of roughly 597,000 Amazon-targeted credentials is being posted as fresh. Such dumps drive credential stuffing, account takeover and fraud using stored payment methods. Impact is partly mitigated by Amazon controls, but user reuse makes it worth a low-priority alert.Leak● 42
Varias bases de datos filtradas puestas a la ventaA fresh post on a major leak forum advertises a bundle of multiple breached databases for sale. The exact organizations and record counts are not yet detailed, which limits triage, but multi-database bundles often contain real PII with downstream fraud risk. Monitor for the seller releasing samples or victim names.Leak● 46
Combolist dirigido de 143.110 cuentas de Binance y CoinbaseA fresh dump labeled as 143,110 high-quality lines targeting Binance and Coinbase accounts is circulating. Crypto exchange credentials are high-value for account takeover, draining funds and SIM-swap follow-on attacks. Defenders should expect credential-stuffing spikes against these platforms and their users.Leak● 70
Base de datos de Coregistros con 8 millones de líneas a la ventaThe same 8-million-line coregistros.com database is being posted on a second underground forum, indicating active distribution. A large Latin American registrant/user dump like this fuels phishing, credential stuffing and identity fraud. The cross-forum spread suggests it is fresh and being pushed now.Leak● 71
Base de datos de Coregistros con 8 millones de líneas a la ventaA seller is offering an 8-million-line database allegedly belonging to coregistros.com, a Spanish-language registry/records service. If genuine, this is a large dump of real user/registrant data useful for identity theft, phishing and account takeover. It matters because registrant-style data often feeds downstream fraud and doxxing campaigns.Leak● 78
Filtración de base de datos del 80% de los colegios de ChileA threat actor is advertising a database that allegedly covers roughly 80% of schools in Chile, exposing institutional and likely student/staff records. A national-scale education leak enables credential stuffing, phishing and fraud against schools, families and education authorities. Chilean education defenders should treat this as a large, credible exposure.