BRIEFLeaklowP40
Taiwanese marketplace Popchill database dumped on forum
Popchill.com
Detected25 October 2026 · 19:41 UTC
An onion forum thread announces a dumped database belonging to Popchill.com, a Taiwanese second-hand fashion marketplace, but the body is behind a login wall. No record count, sample or date is visible from the title alone. If genuine, it would expose customer PII for a regional e-commerce platform and enable account-takeover attempts.
CategoryLeak
Severitylow
Priority score40
Detected25 October 2026 · 19:41 UTC
Leak● 32
Filtración masiva expone a 70.000 agentes de inteligencia de MarruecosNodo313 is re-circulating the JABAROOT dump, a mass leak exposing roughly 70,000 Moroccan intelligence personnel records including identities and contact data. The thread started in August 2026, so it is not a fresh alert, but the dataset is a valuable targeting list for espionage and coercion. It illustrates how exposed state-employee registries become an attack surface for other governments and threat actors.Leak● 68
Filtración de la base de datos de EscapadaRural (2,9M registros)A BreachForums thread offers a downloadable database allegedly belonging to Spain's rural-tourism platform EscapadaRural.com, with roughly 2.9 million records and a thread spanning several pages of replies. No publication date is visible, so freshness is unconfirmed, but the scale of customer PII enables phishing and credential stuffing against Spanish users and travel businesses.Leak● 92
Base de datos de SENECYT (Ecuador) publicada en BreachForumsUser 'pheisito' posted a database belonging to SENECYT, Ecuador's national secretariat for higher education, science and technology, on BreachForums on 25 October 2026. The dump targets an Ecuadorian public-sector body and likely exposes institutional, staff and student records. Fresh government data leaks in the region justify immediate verification and containment.Leak● 40
Dump de más de 500.000 credenciales de dominios .com publicadoA VIP-section release dated 24 October 2026 offers a 500K+ ULP (URL:login:password) list covering .com domains, i.e. working-style credentials for named websites rather than free-mail combos. Because the targets are unspecified sites, any .com-hosted service could see employee or customer credentials replayed in credential stuffing and account takeover attempts.Leak● 74
Base de datos de Shopify de la tienda de MrBeast a la ventaThe actor 'beastfeast' is selling a Shopify database of more than 2 million customer records from the MrBeast Store on BreachForums, posted on Saturday 24 October. Such dumps typically contain names, emails, shipping addresses and order histories, enabling phishing, credential stuffing and fraud against buyers. Any e-commerce brand running on Shopify should treat this as a live exposure and verify which of its own records appear in the dump.Leak● 55
Colección de 4,5 TB atribuida a defensa e inteligencia de Israel a la ventaA BreachForums thread in the Databases section claims to offer a 4.5TB 'collection' attributed to Israeli defense, the IDF and Mossad, without verifiable samples or provenance. It is most likely recycled or fabricated scam material, but if genuine it would expose highly sensitive military and intelligence data. Analysts covering Israel-linked or defense-sector interests should validate samples before treating it as a real breach.