BRIEFLeakhighP76
Japanese bank database with 46 million lines for sale
Banco japonés sin identificar
Detected11 October 2026 · 10:21 UTC
Reposts collapsed2
A seller on DarkForums is offering a stolen database described as a Japanese bank containing 46 million lines. The volume points to a large-scale financial data theft covering customer and account records. Financial institutions and fraud teams should treat it as a credible source for account-takeover, credential-stuffing and carding abuse.
CategoryLeak
Severityhigh
Priority score76
Detected11 October 2026 · 10:21 UTC
Leak● 60
Base de datos de las telefónicas Asiacell y Zain Iraq a la ventaAn actor claims to hold and sell data from Iraqi mobile carriers Asiacell and Zain Iraq, i.e. subscriber records tied to telecom infrastructure. Compromised subscriber data can fuel SIM-swap fraud, account takeover and surveillance of subscribers. Telecom defenders should verify the scope and monitor for reuse of this data.Leak● 66
Filtración de 19 millones de registros de Pathao (Bangladesh)Actors are leaking a claimed 19-million-record database tied to Pathao, a Bangladeshi ride-hailing and delivery company, despite the firm calling the incident 'partial'. It exposes rider and driver PII at large scale, enabling identity theft and targeted phishing. Relevant for defenders tracking large consumer-platform leaks and for any downstream credential abuse.Leak● 44
Filtración de 11 millones de credenciales URL:login:passA dump titled '11M UHQ URL:LOGIN:PASS' was posted on NulledBB, offering roughly 11 million credential pairs. Although no single organisation is named, the volume makes it valuable for credential-stuffing and account-takeover campaigns. Defenders should enforce MFA and monitor for reuse of these logins.Leak● 45
Base de datos de 100K de scalextric.es con DNI a la ventaA seller is offering a 100K-record database of the Spanish retailer scalextric.es with DNI (national ID) data included. Leaked national IDs enable identity fraud and account takeover against Spanish residents. Worth tracking for downstream credential and KYC abuse.Leak● 79
Filtración de base de datos de República DominicanaA Dominican Republic database containing 6.8M and 5.6M images was posted on DarkForums minutes ago, a fresh country-scale exposure. If it holds national IDs or citizen photos it enables identity theft, fraud and impersonation across the country. Regional defenders should verify scope and monitor for reuse of the affected data.Leak● 18
Base de datos NetProspex filtrada y publicada para descargaThe NetProspex B2B marketing contact database has been reposted for public download on BreachForums. It contains business contacts and firmographic data rather than fresh breach material, so its operational value is limited. This is a well-known, older leak rather than a new incident.