BRIEFLeakhighP44
Rotoris.com database of over 1M records for sale
Rotoris.com
Detected21 October 2026 · 10:39 UTC
A database of more than 1 million records attributed to Rotoris.com is listed for sale on DarkForums. The volume suggests customer account and contact data rather than a trivial scrape. Buyers can pivot this into credential stuffing and targeted phishing against the site's user base.
CategoryLeak
Severityhigh
Priority score44
Detected21 October 2026 · 10:39 UTC
Leak● 28
Base de datos de 32M de clientes de Wanelo (2018)A database of 32 million Wanelo customer records, dated 2018, is being offered on a forum. Although the volume is large, the data is old and its current operational value is limited. It is useful mainly as a historical reference of exposed customer credentials.Leak● 42
Filtración de datos de México y Perú anunciada en foroA recent thread announces a leak labeled Mexico-Peru, though scale and impacted organizations are not yet detailed. If confirmed, it affects LATAM entities and exposes credentials or records usable for account takeover. Requires urgent verification and monitoring of leaked accounts.Leak● 60
Filtración de la base de datos de FFMADRID (ffmadrid.es)A threat actor posted a database dump attributed to FFMADRID (ffmadrid.es), a Spanish sports entity, dated 22 October 2026. Though record volume is unconfirmed, a leak of a real organization exposes member/personal data and login credentials reusable in phishing and credential-stuffing. Defenders should verify scope, force credential resets and monitor resale of the dump.Leak● 58
Filtración de 1,8 millones de credenciales de Privalia BrasilA seller posted a 1.8 million-row URL:login:password dataset attributed to Brazilian fashion retailer Privalia. The volume of valid credentials enables credential stuffing and account takeover against customers across Brazil and Latin America. Defenders should force password resets and monitor for reused passwords tied to the brand.Leak● 62
Filtración de 2,16 millones de registros de la eléctrica SWEPCOA 2.16 million-row dataset tied to SWEPCO, a US electric utility, was posted for leak on BreachForums. Exposure of customer and operations-adjacent records for an energy provider merits attention given critical-infrastructure implications. Verify authenticity and monitor for follow-on targeting of utility staff and systems.Leak● 28
Base de datos de empleados de Canada Post (2023)A BreachForums post shares roughly 69,860 lines of Canada Post employee data dated to May 2023. Because the records are years old, this is not a fresh alert, but employee credentials can still enable phishing and ongoing account abuse if not rotated. Treat as a stale but useful reference for credential exposure.