BRIEFLeakhighP50
Indonesian ISP subscriber database offered for sale
Detected17 September 2026 · 07:12 UTC
A collection claiming to be an Indonesian internet service provider subscriber database is circulating for download on RaidForums. Telecom subscriber records enable SIM-swap, phishing and account-takeover campaigns against consumers. The target lies outside Latin America and the post carries no clear date, so it is logged at moderate priority.
CategoryLeak
Severityhigh
Priority score50
Detected17 September 2026 · 07:12 UTC
Leak● 66
Filtración de la base de datos de Cultura.com con 2 millonesDarkForums user Wraxniter published a database attributed to French cultural retailer Cultura.com on October 31, 2026, claiming 2 million records. The data likely includes customer account details that can support phishing, account takeover, and credential reuse. Although smaller than other leaks, it is fresh and tied to a real retailer with a large customer base.Leak● 76
Filtración de 31,1 millones de registros de FitnessParkOn October 31, 2026, DarkForums user Lynyetol posted a database attributed to French gym chain FitnessPark with 31.10 million records. The volume suggests customer names, emails, phones, and possibly credentials, which are valuable for phishing and credential-stuffing. French organizations and FitnessPark customers should treat the exposure as a fresh, large-scale leak.Leak● 80
Filtración de datos de 31,1 millones de ciudadanos israelíesDarkForums user Torramyr posted a 31.10 million-record dataset labeled as Israeli citizens' data on October 31, 2026. If authentic, the scale exposes national PII that can fuel identity theft, phishing, and impersonation campaigns. The freshness and volume make it a high-priority leak for Israeli organizations and defenders monitoring regional exposure.Leak● 88
Filtración de facturas del Instituto de Movilidad de Quintana RooA DarkForums thread exposes invoices from Mexico's Quintana Roo state mobility institute (IMOVEQROO), potentially revealing taxpayer names, amounts, addresses, and supplier data. As a government body, the exposure can enable fraud, impersonation, and targeted attacks against official procedures and payments. Defenders should verify the dataset and notify authorities if the leak is confirmed.Leak● 40
Brecha de datos en un revendedor de hardware de LedgerA thread titled 'LEDGER HARDWARE CRYPTO RESELLER BREACH' was posted on an underground forum, indicating leaked customer data from a reseller of Ledger hardware wallets. Such data typically includes names, addresses and order history, which historically fuels physical-threat and phishing campaigns against crypto holders. The content is login-walled and undated, so scale and recency cannot be confirmed, but the topic is relevant for crypto-asset defenders.Leak● 45
Filtración de base de datos de SquareTrade con 911.000 cuentasA RaidForums clone is offering a free download of a SquareTrade.com database containing roughly 911,000 user accounts and 41.4 million records. The dataset exposes customer contact and account details of a large US device-protection/insurance provider. Because the post has no recent date and this breach has circulated for years, it is a repost rather than a fresh incident, but it can still fuel credential-stuffing and phishing.