BRIEFLeakhighP72
South Korean telecom LG Uplus database for sale
LG Uplus
Detected23 September 2026 · 10:29 UTC
A seller is offering a database belonging to South Korean telecom LG Uplus, with a recent September 2026 listing date. Subscriber data from a major carrier can fuel SIM-swap, account takeover and targeting of enterprise customers, so the sale warrants monitoring even though it is outside our region.
CategoryLeak
Severityhigh
Priority score72
Detected23 September 2026 · 10:29 UTC
LeakPriority 45
Filtración de la base de datos de la Universidad de Camarines Norte (Filipinas)BreachForums hosts a posting offering a database from the University of Camarines Norte, a state university in the Philippines, labeled as 2026 data. If genuine, it exposes student, faculty and applicant records such as identities, contact details and possibly enrolment and financial data. Public universities are frequent targets for identity fraud and credential reuse, so affected users and the institution need to assess the actual scope.LeakPriority 40
Filtración de la base de datos de SplitVPN/NotVPN con 23,4 millones de usuariosA dataset attributed to the VPN provider SplitVPN (also marketed as NotVPN) is circulating on xReactor, reportedly covering 23.4 million users, 58 million connection logs and 13.6 million devices. The thread is already on page 3, so the dump is not fresh, but connection logs and device data from a VPN are highly sensitive and useful for de-anonymisation and account takeover. Credential-stuffing exposure applies to any user or corporate account that reused those VPN credentials.LeakPriority 55
Filtración de base de datos de la minorista Spencer's (EE. UU.)A database dump attributed to US retail chain Spencer's (spencers.com) was posted on BreachForums/DarkForums by actor scarlettgroup on 7 November 2026. As a national retail brand, Spencer's holds customer PII, loyalty and possibly transaction records, all attractive for fraud. The posting is fresh and the same data is being re-shared across forums quickly.LeakPriority 38
Base de datos de AU Small Finance Bank (India) a la ventaThe Darkpro carding forum advertises a database attributed to AU Small Finance Bank, an Indian scheduled commercial bank, with no stated record count or date. If authentic, customer or KYC data of a regulated bank is circulating, enabling fraud and targeted phishing against account holders. Scale and authenticity are unverified, so this is a low-confidence lead worth monitoring.LeakPriority 42
Filtración de base de datos de la estatal PT Surveyor IndonesiaThe actor 'Sophia' posted on DarkForums an alleged ~12,000-record dump of E-Pengadaan, the e-procurement platform of PT Surveyor Indonesia, a state-owned inspection firm. Procurement data exposes supplier contacts, contracts and staff emails usable for targeted phishing. Scale is modest and the date is unconfirmed, so it is a watch item rather than an alert.LeakPriority 46
Colección de base de datos de Virtue Maritime ShipmanagementA database collection attributed to Virtue Maritime Shipmanagement Corporation was posted in the BreachForums Leaks section. Maritime crewing and staffing records can expose seafarer personal data, identity documents and operational contact details. The full scale is unconfirmed, but ship operators and crewing agencies linked to the firm should assess exposure.