BRIEFLeakhighP45
Notion database with 110 million records for sale
Notion
Detected16 September 2026 · 08:12 UTC
A seller is offering a 110-million-record Notion workspace database, posted in June 2026. Such data often includes corporate notes, embedded credentials and project details valuable for follow-on intrusion. Organizations using Notion should audit for exposed secrets and monitor for credential reuse.
CategoryLeak
Severityhigh
Priority score45
Detected16 September 2026 · 08:12 UTC
Leak● 52
Base de datos de la Agencia Nacional de Innovación de Tailandia ofrecida en foroA DarkForums thread titled with the National Innovation Agency of Thailand and a database reference indicates a claimed leak of records from a government innovation agency. The content is behind a login wall, so scale and authenticity could not be confirmed, and no date is visible in the collected text. Even so, a dump of a government agency's internal data can expose staff, grant applicants and partner organisations to targeted phishing.Leak● 66
Filtración de 31M de registros de la mutua francesa MutuelledesmotardsDarkForums user Kovnonos posted a 31.10 million record dataset attributed to mutuelledesmotards.fr, a French motorcycle insurance provider, on 31 October 2026. Insurance records typically combine identity, contact, vehicle and contract data, which is directly usable for fraud, phishing and account takeover against policyholders. The size places it among the larger fresh European leaks of the week.Leak● 76
Filtración completa de datos del operador de telecomunicaciones OdidoDarkForums user Kovnonos posted on 31 October 2026 what is described as a full leak of Odido, one of the largest telecommunications operators in the Netherlands. Telecom datasets typically include subscriber identity, address, and service and billing details, making them valuable for SIM-swap fraud, phishing and account takeover. A complete dump of a national carrier is critical-infrastructure relevant far beyond the company itself.Leak● 93
Filtración de 11 millones de datos del Registro Electoral de ArgentinaA DarkForums user (Loxsober) published a file claiming 11 million Argentine personal records tied to the 2026 electoral registry, posted on 31 October 2026. If authentic, it would expose voter identity data (name, document number, address, polling place) at national scale, enabling identity fraud, phishing and targeted harassment of citizens and public officials. Electoral data is highly sensitive in Argentina and any confirmed exfiltration implies a compromise of a state registry or its contractor chain.Leak● 41
Base de datos de SquareTrade con 41 millones de registros ofrecida en descargaA breach forum thread, visible only by title, advertises a SquareTrade dataset described as 911,552 user accounts and 41,454,397 records as a free download. If accurate, the volume points to customer, order or claims data from the device-protection and warranty provider, which supports fraud and identity-theft schemes. The post may be a recycled or resold dump and cannot be verified from the login-walled content, but the record count warrants checking for exposure of customers and partners.Leak● 44
Base de datos de SoundCloud publicada en un foro criminalUser 'Nymrekar' posted on DarkForums on 31 October 2026 a thread titled 'Soundcloud database (as requested)', sharing what is presented as a dataset of SoundCloud user records. The content and volume are not visible, and such releases are often recycled collections of emails and hashes rather than a fresh breach. Either way, exposed email/password pairs for a large consumer platform feed credential-stuffing against unrelated services where users reuse passwords.