BRIEFLeakhighP58
Bitcoin user database for sale on DarkNetArmy
Detected13 September 2026 · 03:12 UTC
A vendor on DarkNetArmy is advertising a large 'Bitcoin user database vault 2026' targeting crypto account holders. If genuine, such data fuels account takeover, phishing and theft of funds, and is commonly reused for credential stuffing across exchanges. Authenticity is unverified, so treat it as a lead for monitoring rather than a confirmed breach.
CategoryLeak
Severityhigh
Priority score58
Detected13 September 2026 · 03:12 UTC
Leak● 48
Base de datos de gobiernos sin identificar a la venta en DarkNetArmyA DarkNetArmy member ('SUB-ZER0') posted a database titled 'Random Governments', suggesting leaked records from public-sector entities, though the affected countries are not specified. The post is fresh (today), so the data may still be in limited circulation before broader exposure. Any government body should treat this as a potential source of exposed credentials and contact data.Leak● 44
Filtración de base de datos de la escuela francesa de informática ESGIA database reportedly belonging to ESGI, a French computer-engineering school (esgi.fr), has been posted in the Spear Leaks databases section. Educational institutions hold student, applicant and staff PII plus credentials that can be reused for account takeover and further intrusion. French defenders and ESGI affiliates should confirm the breach scope and force credential resets.Leak● 64
Filtración de 1,2 millones de registros con SSN y fecha de nacimiento de la belga EtudebordetA database allegedly containing roughly 1.2 million lines from Belgian firm Etudebordet.com is being offered on the PwsForums database section, including full names, national SSN numbers, dates of birth and additional personal data. Exposing national registry identifiers enables identity theft, credit fraud and account takeover against Belgian residents. Defenders and Belgian data-protection teams should trace the source of the breach and watch for downstream fraud.Leak● 34
Base de datos de la financiera indonesia GPSFinance.co.id filtradaActor 'DBHunter' posted a 241MB dataset described as loan and investment records from the Indonesian financial services firm GPSFinance.co.id on the DarkNetArmy forum. Financial records combine identity data with loan amounts and repayment behaviour, ideal for loan fraud and highly convincing phishing. The thread started on 12 May 2026, so this is a months-old listing rather than a new alert.Leak● 38
Filtración de datos del Hospital Privado Egekent en Denizli, TurquíaA thread on LeakForum claims to hold extracted data from Denizli Private Egekent Hospital in Turkey, a private healthcare provider. Hospital datasets normally include patient identities, contact details and clinical or billing information, which are highly sensitive and valuable for insurance fraud and extortion. The listing is undated and behind a wall, so the volume and authenticity are still unverified.Leak● 55
Filtración gratuita de la base de datos de la provincia de KalimantanA user 'Mrsawit' published a free dump labelled as the database of Kalimantan province, an Indonesian regional government, on the Spear forum with several mirrors. Regional datasets of this kind usually contain civil registry, licensing and staff records that support phishing and impersonation of public offices. It was posted minutes ago and released free to all members, so it will spread quickly.