BRIEFLeakhighP62
Fidelity Digital Assets database (288.8 GB) for sale
Fidelity Digital Assets
Detected19 October 2026 · 20:39 UTC
A 288.8 GB dataset spread across 13 record sets is being offered, attributed to Fidelity Digital Assets, a major financial/crypto custodian. If genuine, this is a very large financial-sector exposure affecting institutional and client data that could fuel BEC and account-takeover campaigns. Financial institutions and their LATAM counterparties should watch for downstream credential or account abuse.
CategoryLeak
Severityhigh
Priority score62
Detected19 October 2026 · 20:39 UTC
Leak● 40
Filtración de datos del sitio gubernamental indio ICAR PuneA five-hour-old post claims a database leak from ataripune.icar.gov.in, a subdomain of India's agricultural research council. Government research portals often hold staff and research data useful for phishing and reconnaissance against public institutions. It is outside the Latin American focus but still a genuine government-domain exposure.Leak● 45
Base de datos filtrada del emisor iraquí de tarjetas QiCardA new DarkForums thread advertises a leaked database from QiCard, Iraq's main national payment-card provider. Compromised cardholder or subscriber data from a payment system carries direct financial-fraud and account-takeover risk. Scale and authenticity are not yet evidenced, so verification is required.Leak● 50
Venta de la base de datos de Motos del Oriente (Colombia)A seller is offering a database of about 207,000 records from the Colombian motorcycle dealer Motos del Oriente. Customer PII from a retailer supports phishing, credit application fraud and impersonation of buyers. It is a modest but regional leak worth tracking for Colombian consumer and financial-sector defenders.Leak● 50
Venta de 10 millones de datos personales de Thrive Online GroupA seller lists roughly 10 million PII records belonging to South Africa's Thrive Online Group for sale on a private forum. The volume and personal-data nature make it valuable for identity theft and large-scale phishing against South African consumers. Details are login-walled, so scope and recency still need independent confirmation.Leak● 55
Base de datos de 820 millones de usuarios de Alipay a la ventaA poster claims to hold a full database of 820 million Alipay users, a scale that would make it one of the largest financial-data leaks ever offered. Such claims are frequently recycled or exaggerated, so authenticity must be verified before action. If real, it would fuel massive credential-stuffing and payment-fraud campaigns globally.Leak● 60
Filtración de 689.000 registros del portal urssaf.fr de FranciaA fresh DarkForums post offers roughly 689,000 records tied to PajEmploi, a service of France's URSSAF social-contribution agency. Such data can be abused for fraudulent benefit claims, impersonation and business-owner phishing. Because the source is a government social-security body, the identity exposure is especially sensitive.