BRIEFLeakhighP52
Brazilian travel agency Hurb database leaked and available for download
Hurb
Detected10 October 2026 · 19:22 UTC
The database of Hurb, a major Latin American online travel agency (formerly Hotel Urbano), is being shared for download on BreachForums. A dump of this scale exposes large volumes of customer PII, enabling fraud and targeted phishing. Though a Hurb breach was reported earlier, this fresh public posting revives exposure for the affected users.
CategoryLeak
Severityhigh
Priority score52
Detected10 October 2026 · 19:22 UTC
Leak● 58
Filtración de base de datos de Akademia Knauf Brasil (13.000 registros)A database from Akademia-knauf.com.br, the Brazilian portal tied to building-materials giant Knauf, was leaked in roughly 13,000 lines. It exposes user account data of a Latin American corporate entity, enabling phishing and credential-stuffing against employees and partners. Brazilian and regional organizations should treat this as a live, in-region leak.Leak● 48
Nuevo volcado de registros de stealer White Cloud (9,7 GB)A 9.7 GB collection of fresh stealer logs dated 8 Oct 2026 has been posted, aggregating credentials and session data harvested by infostealers across many victims. Such logs directly fuel account takeover and initial-access operations against many organizations. Defenders should check whether their users' credentials appear in this dump.Leak● 50
Venta de datos del gobierno francés (gouv.fr) en foro de brechasA BreachForums seller is advertising data allegedly tied to French government domains (gouv.fr). Government datasets commonly contain internal directories, staff credentials or citizen records that enable follow-on intrusion and phishing against public institutions. The scope is unconfirmed and the post lacks a clear recent date, but any gov-domain exposure should be verified and monitored.Leak● 30
Filtración de la base de datos del comercio brasileño MoobrioA database allegedly belonging to Brazilian retailer moobrio.com.br is being shared on DarkForums. The thread dates from December 2024, so this is stale rather than a fresh incident. If the records are customer PII they could support fraud and phishing against Brazilian consumers, but urgency is low.Leak● 38
Filtración de 2.870 millones de usuarios de Twitter/X en un dataset de 450GBA cleaned dataset of roughly 2.87 billion Twitter/X user records (~450GB) is circulating on BreachForums. It looks like a repackaged version of the older 2023 Twitter scrape rather than a new breach, so alerting value is limited. It still feeds email/phone enumeration and targeted phishing against X users, so brand and fraud teams should be aware.Leak● 40
Filtración de la base de datos del sitio social BookCrossingA database for the social and book-sharing site BookCrossing is being offered in DarkForums' leak section in a freshly posted thread. If genuine it would expose member account and profile data, enabling credential stuffing and phishing. Scale is unclear, but the recency warrants a quick look by brand-protection and fraud teams.