BRIEFLeakhighP74
Spain energy sector CUPS database leaked
Spain energy sector (CUPS)
Detected15 September 2026 · 11:12 UTC
A Spanish energy-sector database containing full CUPS supply-point identifiers is advertised on DarkForums. CUPS codes map subscribers to metering points, so the data is valuable for fraud, account takeover and targeted attacks against energy utilities. This is fresh critical-infrastructure data from a Spanish-speaking region and warrants verification of the source utility.
CategoryLeak
Severityhigh
Priority score74
Detected15 September 2026 · 11:12 UTC
Leak● 41
Base de datos de 120.000 compradores de oro de Goldunion (Francia)A DarkForums thread posted on 30 October offers a 120,000-record database from goldunion.fr, a French precious-metals dealer, marketed as premium high-value data. Precious-metal customer records usually carry identity, address and purchase or holdings details. That mix is attractive for targeted fraud, burglary reconnaissance and social engineering against affluent customers.Leak● 46
Filtración de base de datos del NHS británico con 31.000 registrosOn 30 October a DarkForums post advertised a 31,000-record leak attributed to the UK National Health Service. The record count is modest and no sample is shown, but health-sector data is sensitive and commonly reused for medical fraud, insurance abuse and convincing phishing against staff and patients. Even a partial NHS dataset carries regulatory and reputational weight.Leak● 52
Base de datos del gobierno de Sudáfrica publicada en DarkForumsA thread titled 'South African Government Database' was posted on DarkForums on 30 October. No record count or sample is shown, so authenticity is unconfirmed, but genuine public-sector dumps typically contain staff contacts, national ID numbers and portal credentials. Those enable targeted phishing and identity fraud against government employees and citizens they serve.Leak● 55
Filtración de 200.000 clientes de Getir y BiTaksi en TurquíaOn 30 October a DarkForums thread announced a fresh 200,000-record customer dump from Getir, the Turkish rapid-delivery unicorn, and BiTaksi, its ride-hailing arm. Customer datasets of this kind usually carry names, phone numbers, e-mail addresses and address or trip metadata. That supports highly convincing phishing and smishing against Turkish consumers, and it can be cross-referenced with food-delivery and mobility accounts.Leak● 56
1,5 millones de credenciales de policía y gobierno de Bangladesh filtradasA 'URL & PASS police gov bd' set of roughly 1.5 million lines was posted on DarkForums on 30 October, targeting Bangladeshi police and government web portals. Bulk credential dumps of public-sector portals enable account takeover of official mailboxes and administrative panels. Attackers can use them for document theft, impersonation and follow-on intrusion into ministry systems.Leak● 58
Filtración de la base de datos del marketplace turco sahibinden.comOn 30 October a thread on DarkForums advertised a database leak from sahibinden.com, Turkey's largest classifieds marketplace with tens of millions of users. The post does not disclose the record count, but user data from such a platform typically includes names, phone numbers, e-mail addresses and listing history. It is a strong base for targeted phishing and account-takeover attempts against Turkish consumers and businesses.