BRIEFLeakhighP50
Spanish e-learning platform Megacursos database for sale (100K)
megacursos.com
Detected11 November 2026 · 11:43 UTC
Reposts collapsed2
Seller Richard2002 is offering a database advertised as ~100,000 records from megacursos.com, a Spanish online-courses platform, on the DarkForums marketplace. The listing indicates a real organization's user data is being monetized, exposing potentially names, emails and credentials of students and customers. Such data fuels credential stuffing and targeted phishing against Spanish-speaking users.
CategoryLeak
Severityhigh
Priority score50
Detected11 November 2026 · 11:43 UTC
LeakPriority 48
Base de datos de Azerbaijan Airlines (azal.az) a la ventaA seller on BreachForums is offering a database allegedly from Azerbaijan Airlines (azal.az) that includes passenger records and upcoming flight details. Airline passenger data enables targeted phishing, loyalty-account takeover, and social-engineering of travelers. The airline and regional aviation authorities should verify the breach and alert affected passengers.LeakPriority 56
Filtración de 30 millones de datos de Dukcapil de IndonesiaA user posted on DarkForums offering what is claimed to be 30 million records from Dukcapil, Indonesia's civil registration agency responsible for population and ID data. Such records include national ID, family and address details that fuel identity fraud and account takeover across financial and government services. Indonesian authorities and banks should validate the claim and watch for KYC-bypass attempts.LeakPriority 62
100 GB de datos KYC de Transak a la venta en un foroA user calling themselves oxrock posted on DarkForums claiming to leak 100 GB of KYC documents belonging to Transak, a global crypto on/off-ramp provider. KYC files typically contain identity documents, selfies and proof of address, creating high identity-theft and account-takeover risk for users. Financial and crypto platforms should monitor for downstream misuse of the exposed identities.LeakPriority 85
Filtración de base de datos de la Alcaldía de Bolívar, ColombiaAn actor posted on DarkForums a database allegedly belonging to the Alcaldía Municipal de Bolívar, a municipal government in Valle del Cauca, Colombia, exposing citizen and administrative records. Leaks of public entities like this enable identity fraud, targeted phishing against public officials, and further intrusions. Colombian public bodies and the regional CERT should verify the scope immediately.LeakPriority 52
Venta de base de datos de la web húngara kutyubazar.hu (1M registros)Seller Richard2002 is offering a roughly 1-million-record database from the Hungarian pet marketplace kutyubazar.hu on DarkForums. Full-site scrapes like this typically include emails, hashed passwords and phone numbers, enabling credential stuffing and targeted phishing. The listing appeared within days of this alert, so the data is likely fresh and usable.LeakPriority 24
Redistribución de 2.700 millones de SSN de EE. UU. de National Public DataA 2.7 billion-record trove of US Social Security Numbers attributed to the 2024 National Public Data breach is being re-posted on BreachForums. The dataset is already years old and widely mirrored, so it is not a new incident and has little fresh operational value. It still fuels identity theft and synthetic-identity fraud, but should be treated as recycled material rather than a new alert.