BRIEFLeaklowP38
Crypto exchange Nexo database (1.7M) re-posted
Nexo
Detected12 September 2026 · 11:12 UTC
A 1.7M-record Nexo database is being re-shared on BreachForums, dated May 2026 but tied to an earlier 2024 leak. It contains customer identity and KYC-type data valuable for account takeover and crypto-targeted fraud. The impact is real but reduced because the material is recycled rather than a new intrusion, so treat it as context, not a fresh alert.
CategoryLeak
Severitylow
Priority score38
Detected12 September 2026 · 11:12 UTC
Leak● 45
Base de datos del portal estatal ruso Gosuslugi ofrecida en foroUser DBHunter posted on DarkNetArmy a claimed 2025 database of gosuslugi.ru, Russia's unified government services portal used for benefits, tax and identity functions. If authentic, the records enable credential stuffing and identity fraud against a state platform, and reveal exposure patterns relevant to any public-sector identity service. The post is roughly seven weeks old and the underlying data is dated 2025, so it is not a fresh alert.
Leak● 48
Filtración de datos del gobierno de Pamekasan (go.id), IndonesiaForum member SUB-ZER0 posted on the DarkNetArmy onion forum a leak of data tied to pamekasankab.go.id, the site of Indonesia's Pamekasan Regency government, marked as posted today. Regional government records typically contain citizen identifiers and internal staff data, making this a genuine government breach rather than carding noise. Defenders should verify the scope and whether the dataset is being redistributed.Leak● 58
Filtración de 300.000 clientes de OrionTelekom (Serbia)A threat actor is offering a 300,000-customer database belonging to Serbian telecom OrionTelekom (oriontelekom.rs), including a sample for verification. Telecom subscriber data enables SIM-swap, phishing and identity fraud against customers and staff. It is a serious leak for a named critical-infrastructure operator, even though it sits outside the LATAM region.Leak● 41
Filtración de datos del distrito escolar de GettysburgA BreachForums post claims a Gettysburg Area School District database with ~976 rows and 464 SSNs. Even a modest school-district leak exposes minors', families' and staff SSNs, enabling fraud and phishing. District IT should confirm the leak and notify affected families.Leak● 48
Filtración de datos municipales de Niagara Falls con 1.141 SSNA BreachForums post advertises Niagara Falls municipal data with ~1,844 rows and 1,141 SSNs. Municipal exposure of SSNs enables fraud and phishing against residents and city staff. City security teams should assess the claim and alert affected individuals.Leak● 52
Filtración de datos del condado de Garrett con 2.000 SSNA BreachForums database post claims Garrett County government data with ~2,542 rows and 2,083 SSNs. A county government holding resident and employee SSNs is an attractive target for fraud and further intrusion. Local security teams should confirm the exposure and warn residents.