BRIEFLeaklowP45
14.74 million URL:LOG:PASS credential database for sale
Detected3 October 2026 · 20:55 UTC
A dump of roughly 14.74 million URL:LOG:PASS credentials is being offered privately as a fresh UHQ base on Cracked.st. Large credential sets fuel credential-stuffing, account takeover and initial access across many services. It is not tied to a specific named organisation, but its scale justifies monitoring for reused corporate and government credentials.
CategoryLeak
Severitylow
Priority score45
Detected3 October 2026 · 20:55 UTC
Leak● 65
Filtración de base de datos bancaria de MéxicoA dark-forum post from 16 August 2026 offers a leak of a Mexican bank database containing account numbers. Financial records of this kind fuel account takeover, fraud and targeted social engineering against banking customers in the region. Although the post is several weeks old, it remains relevant to LatAm banking defenders.Leak● 72
Filtración de base de datos del gobierno de IsraelA forum post dated 3 October 2026 advertises an 'israel-gouv-db' database, indicating a dump of Israeli government data. Government database leaks enable identity theft, credential reuse and targeted phishing against public-sector staff. Defenders should hunt for reuse of government credentials and confirm the scale and origin of the dataset.Leak● 85
Filtración de base de datos del gobierno municipal de Nuevo Laredo (nld.gob.mx)The Mexican municipal government domain nld.gob.mx (Nuevo Laredo, Tamaulipas) was just posted as a database leak on DarkForums, minutes before collection. Government databases typically hold citizen records, employee data and internal credentials, so this is a direct exposure of LATAM public-sector information. Regional defenders should treat it as a live incident and quickly verify scope and impact.Leak● 45
Base de datos de Bell (2014) filtrada para descargaA database labeled 'Bell2014' was published for download on BreachForums, with notable community interest (six pages of replies). Bell is a major telecom operator, so the material is relevant to critical-infrastructure defenders, but the '2014' label strongly suggests old data, lowering its current urgency. Defenders should confirm whether it contains real subscriber records.Leak● 30
Base de datos de Taringa reflotada en BreachForumsA large Taringa user database is being re-shared for download on BreachForums. Taringa is a major Argentine social platform, but this corresponds to an old breach that has circulated for years, so it is not a fresh incident. It still matters for Argentine credential-stuffing awareness.Leak● 38
Filtración de base de datos de 3,36 GB de 'Colec' (Francia)A moderator leaked a 3.36GB database labeled 'Colec' (French collection) containing over 10,000 files. The origin and affected organization are unclear, but the size suggests a real dataset. It is fresh yet outside the AR-LATAM focus, so priority is moderate.