BRIEFLeaklowP40
Asiacell telecom database offered on hacking forum
Asiacell
Detected18 October 2026 · 11:26 UTC
A hidden-service forum thread advertises a database belonging to Asiacell, one of Iraq's largest mobile operators serving millions of subscribers. The content sits behind a login wall, so scale, fields and authenticity are unconfirmed, but a telecom subscriber dump would expose identifiers, contact data and potentially SIM-related records useful for fraud and account takeover. Telecom leaks also feed SIM-swap and smishing campaigns beyond the country of origin.
CategoryLeak
Severitylow
Priority score40
Detected18 October 2026 · 11:26 UTC
Leak● 24
Repost de 3 millones de leads de débito de EE. UU.A forum user reposted a 3 million record set of US debit/credit 'leads', i.e. cardholder contact and partial card data originally circulated months earlier. It is a repost dated May 2026 and unrelated to any Argentine or LATAM entity, so its present value is mainly for fraud teams tracking US card abuse. Treat it as stale exposure, not a fresh alert.Leak● 37
Filtración de 1,6 GB de registros de stealer del 18 de octubreA 1.6 GB 'fresh' infostealer log archive dated 18 October 2026 was posted publicly on underground forums. These logs contain browser-saved passwords, cookies and session tokens harvested from infected victim machines. Targets are unnamed and volume is moderate, but exposed session tokens can enable account takeover, so defenders can match their domains against the captured URLs.
Leak● 63
Filtración de 75 millones de credenciales URL:login:contraseñaA 75 million record ULP (URL:login:password) dump was released today as 'private/UHQ' on a leak forum. These stealer-log aggregates capture corporate webmail, VPN and SaaS logins from infected machines worldwide, so any organization may be represented. Defenders should pivot on recent captured URLs pointing at their own login portals and force credential resets/reset MFA for exposed accounts.Leak● 38
Filtración de 2,5 millones de cuentas de usuarios de SpotAngelsA database attributed to the parking app SpotAngels, roughly 2.56 million user accounts, is being offered as a free download. Such volumes typically include email addresses, password hashes and location or vehicle-related data, which fuel credential stuffing, phishing and physical-location inference. It is a commercial consumer service rather than critical infrastructure and the post appears to be a redistribution, so priority is moderate.Leak● 50
A la venta documento interno de SpaceX sobre la constelación StarshieldA seller on a carding forum is offering what is described as a SpaceX internal technical baseline and architecture description for the Starshield military satellite constellation. If authentic, it exposes design and capability details of a defense-linked system used by US government customers. Treat it as unverified and likely a scam, but any real leak of this material is relevant to defense and space-sector threat monitoring.Leak● 38
Base de 672k contactos profesionales de Wuzzuf a la ventaA forum user is selling a 672k-record database of wuzzuf.net, an Egyptian recruitment platform, said to contain emails, phone numbers and user profiles. It is a real, sizable professional-contacts leak useful for phishing and credential-stuffing campaigns. Not region-critical, but a notable PII exposure worth tracking for downstream targeting.