BRIEFLeaklowP48
Crypto.com database of one million users for sale
Crypto.com
Detected3 November 2026 · 06:24 UTC
A SpyHackerz post by 'databoss' (dated January 2026) advertises a database of roughly one million Crypto.com users. The data is several months old, so it is not a fresh alert, but it remains valuable for credential stuffing and phishing against crypto account holders. Teams handling crypto-related identity risk should treat it as a stale but real exposure.
CategoryLeak
Severitylow
Priority score48
Detected3 November 2026 · 06:24 UTC
Leak● 45
Base de datos de 1 millón de usuarios de Crypto.com a la ventaA Niflheim World BHF thread advertises a claimed one-million-record Crypto.com customer database, a major global cryptocurrency exchange. The thread appears to be an older, bumped listing (low thread ID relative to current activity) with no clear recent date, so freshness is uncertain. Exposure of exchange KYC/customer data carries fraud and account-takeover risk, but this is neither LATAM government nor clearly a fresh breach.Leak● 74
Base de datos de representantes de SINACOL CENCOLAB MéxicoA DarkForums user (homercracker) posted a database of SINACOL/CENCOLAB representatives from Mexico in early November 2026. The dump likely contains names, contact and organizational details of representatives, valuable for targeted phishing, impersonation and social engineering against Mexican labor or health institutions. Affiliated organizations should assess the exposure of these individuals.Leak● 80
Filtración de 2 TB de datos del Gobierno de España por MortemTeamThe group MortemTeam is advertising a 2 TB collection of records attributed to the Government of Spain (Gobierno de España) on BreachForums, bundled with its own data bot. If authentic, it could expose citizen records, internal documents and ministry data, enabling targeted phishing and fraud against public-sector staff and citizens. Spanish public administration should verify exposure and monitor for data reuse.Leak● 40
Base de datos de 1 millón de usuarios de Crypto.com a la ventaA seller on the Niflheim forum advertises a one-million-record database allegedly taken from crypto exchange Crypto.com, with no date or verifiable sample in the post. If genuine, it would expose customer identities and KYC data of a major exchange, a high-value target for fraud. The claim should be treated cautiously because this forum frequently recycles or fabricates dumps.Leak● 50
Combolist de 1 millón de credenciales de correo de MéxicoOn October 31, 2026 the user Jarkilon published on DarkForums a one-million-line email:password combolist targeting Mexican users. Collections of this size fuel credential stuffing and account takeover against banking, government and corporate portals in Mexico, where password reuse is widespread. Even without a named victim, it is a direct exposure risk for Mexican organizations.Leak● 56
Datos PII y de Stripe de un sitio de póker a la ventaA seller using the handle IanParker posted on DarkForums on November 3, 2026 a dataset described as fresh PII and Stripe payment data pulled from a poker site's database. If authentic, it exposes player identities, contact details and card/payment metadata that enable fraud and account takeover. Gambling operators and their payment processors should treat it as a live breach until disproven.