BRIEFLeaklowP40
110-million-record Notion database offered for sale
Notion
Detected16 September 2026 · 09:12 UTC
A seller claims to offer a 110-million-record Notion data set, a large volume for a widely used workspace platform whose documents often hold corporate and personal secrets. The post dates to late June 2026, so it is not a fresh alert, but the volume and sensitive-content risk keep it worth tracking. Defenders should assess whether their organization's workspace data appears in such claims.
CategoryLeak
Severitylow
Priority score40
Detected16 September 2026 · 09:12 UTC
Leak● 52
Filtración de datos de salud de 1,8 millones en ShandongA database with sensitive detail on roughly 1.8 million residents of Shandong province, China, including health codes and national ID numbers, is being shared in CSV form. This is government-linked citizen health data, enabling identity theft and targeted fraud. Defenders tracking regional data-broker activity should note the reuse potential of such identifiers.Leak● 58
Base de datos de Coupang (Corea del Sur) ofrecida en foroA data set tied to Coupang, South Korea's largest e-commerce platform, is being offered in a darkweb databases section with a fresh post. Coupang holds order, address and payment-adjacent data for tens of millions of users, so a verified leak carries serious fraud and privacy impact. Defenders should watch for credential reuse and resale of Coupang customer data.Leak● 45
Base de datos de Notion con 110 millones de registros a la ventaA seller is offering a 110-million-record Notion workspace database, posted in June 2026. Such data often includes corporate notes, embedded credentials and project details valuable for follow-on intrusion. Organizations using Notion should audit for exposed secrets and monitor for credential reuse.Leak● 52
Volcado de datos de 13 millones de ciudadanos de CanadáA 13 million-record dump of Canadian citizen data is circulating in underground forums. Identity data of this scale fuels identity theft, benefits fraud and account takeover across the population. Although outside AR-LATAM, it is a landmark government-scale leak that CTI teams should track for reused data and linked campaigns.Leak● 62
Base de datos de CenterPoint Energy (Texas) con 3 millones de filasA 3,093,459-row database attributed to CenterPoint Energy, a major Texas electric and gas utility, is being offered on BreachForums. Utility customer and operational data can enable billing fraud and reconnaissance for attacks on critical energy infrastructure. Energy-sector defenders should verify the exposure and warn affected customers.Leak● 90
Filtración gratuita de 3,6 millones de registros de ArgentinaA threat actor is freely distributing a database of roughly 3.6 million Argentine records on DarkForums, posted today. The dataset likely contains personal and contact data of Argentine citizens, enabling phishing, identity fraud and credential stuffing. AR-LATAM defenders should urgently obtain and validate the dump to identify and notify affected parties.