BRIEFLeakhighP52
Hallmark database with 8 million records for sale
Hallmark
Detected19 October 2026 · 15:39 UTC
A dataset of roughly 8 million records labelled Hallmark is offered for download on a breach forum, suggesting a large customer or account database leak. At that scale it enables credential stuffing and targeted phishing against the brand and its partners. Defenders should check for reuse of corporate accounts in the dump.
CategoryLeak
Severityhigh
Priority score52
Detected19 October 2026 · 15:39 UTC
Leak● 45
Filtración de base de datos de la autoridad gubernamental SHENA de BaréinA threat actor has posted a database belonging to Bahrain's Safety, Health and Environment National Authority (SHENA), a government regulator, on the Spear Leaks forum. Exact record counts and fields sit behind the listing, but regulator data typically exposes internal staff accounts, emails and contact records that fuel targeted phishing against civil servants. Defenders watching Gulf government exposure should track it for downstream credential abuse.Leak● 40
Filtración de la base de datos inmobiliaria de MykukunThe breach forum lists a leaked database from Mykukun, a real-estate data and analytics provider. Real-estate professional account data can be leveraged for business email compromise and targeted phishing. Smaller scale but still relevant for monitoring credential reuse.Leak● 48
Filtración de base de datos de clientes de Spytec GPS con 131.000 registrosA customer database of GPS-tracking vendor Spytec containing about 131,000 records is listed on a breach forum. Tracking-service customer data can expose physical-location and contact details, aiding stalking and fraud. It is a moderate-size leak worth monitoring for reused credentials.Leak● 47
Filtración de base de datos de la autoridad SHENA de BrunéiA database attributed to Brunei's Safety, Health and Environment National Authority (SHENA) has been posted for download on a breach forum. As a national regulatory body, it likely handles internal staff, inspection and compliance records whose exposure raises government-targeting and phishing risk. Though outside the AR-LATAM focus, government database leaks are worth tracking due to possible downstream supply-chain or credential reuse.Leak● 60
Filtración de la campaña de Philip Morris en Brasil (Cia de Trade)A 215MB archive tied to a Philip Morris campaign run through the Brazilian firm Cia de Trade has been leaked, including PST mail archives, HR pay stubs and roughly 965 staff credentials. The exposure of internal email and HR records enables targeted phishing, business email compromise and credential reuse against the organization and its partners. Brazilian and regional defenders should force credential resets and review mail exposure.Leak● 54
Filtración de 1,5 millones de transacciones de QRIS IndonesiaA BreachForums thread is distributing what it claims is a database of about 1.5 million QRIS transactions, Indonesia's national QR payment standard used by banks and merchants nationwide. Though outside Latin America, it is a direct example of national payment-rail data being traded openly, which is useful context for defenders of similar systems such as Pix or Mercado Pago. Scale and freshness of the dataset are unverified and should be treated as unconfirmed.