BRIEFLeakhighP55
Thailand's National Innovation Agency database leaked
National Innovation Agency (NIA), Thailand
Detected30 October 2026 · 13:24 UTC
A DarkForums thread by Marpezal offers a database attributed to Thailand's National Innovation Agency, a government body that funds startups and holds grant applicant and partner records. Government agency dumps expose staff accounts, applicant PII and supplier contacts that are useful for follow-on phishing and invoice fraud. Scale is not stated in the post, so verification of the sample is required.
CategoryLeak
Severityhigh
Priority score55
Detected30 October 2026 · 13:24 UTC
Leak● 41
Base de datos de 120.000 compradores de oro de Goldunion (Francia)A DarkForums thread posted on 30 October offers a 120,000-record database from goldunion.fr, a French precious-metals dealer, marketed as premium high-value data. Precious-metal customer records usually carry identity, address and purchase or holdings details. That mix is attractive for targeted fraud, burglary reconnaissance and social engineering against affluent customers.Leak● 46
Filtración de base de datos del NHS británico con 31.000 registrosOn 30 October a DarkForums post advertised a 31,000-record leak attributed to the UK National Health Service. The record count is modest and no sample is shown, but health-sector data is sensitive and commonly reused for medical fraud, insurance abuse and convincing phishing against staff and patients. Even a partial NHS dataset carries regulatory and reputational weight.Leak● 52
Base de datos del gobierno de Sudáfrica publicada en DarkForumsA thread titled 'South African Government Database' was posted on DarkForums on 30 October. No record count or sample is shown, so authenticity is unconfirmed, but genuine public-sector dumps typically contain staff contacts, national ID numbers and portal credentials. Those enable targeted phishing and identity fraud against government employees and citizens they serve.Leak● 55
Filtración de 200.000 clientes de Getir y BiTaksi en TurquíaOn 30 October a DarkForums thread announced a fresh 200,000-record customer dump from Getir, the Turkish rapid-delivery unicorn, and BiTaksi, its ride-hailing arm. Customer datasets of this kind usually carry names, phone numbers, e-mail addresses and address or trip metadata. That supports highly convincing phishing and smishing against Turkish consumers, and it can be cross-referenced with food-delivery and mobility accounts.Leak● 56
1,5 millones de credenciales de policía y gobierno de Bangladesh filtradasA 'URL & PASS police gov bd' set of roughly 1.5 million lines was posted on DarkForums on 30 October, targeting Bangladeshi police and government web portals. Bulk credential dumps of public-sector portals enable account takeover of official mailboxes and administrative panels. Attackers can use them for document theft, impersonation and follow-on intrusion into ministry systems.Leak● 58
Filtración de la base de datos del marketplace turco sahibinden.comOn 30 October a thread on DarkForums advertised a database leak from sahibinden.com, Turkey's largest classifieds marketplace with tens of millions of users. The post does not disclose the record count, but user data from such a platform typically includes names, phone numbers, e-mail addresses and listing history. It is a strong base for targeted phishing and account-takeover attempts against Turkish consumers and businesses.