BRIEFLeaklowP46
Xiaomi China database posted on leak forum
Xiaomi
Detected2 November 2026 · 19:24 UTC
Reposts collapsed2
A SpyHackerz forum thread in the 'Fresh Leaks / Dump Vault' section offers a 'Xiaomi China Database' shared as CSV files by user Myra. The scale and authenticity are unverified, but a large consumer/device database from a major manufacturer can expose customer PII usable for phishing and account takeover. Analysts should obtain and validate the sample before alerting.
CategoryLeak
Severitylow
Priority score46
Detected2 November 2026 · 19:24 UTC
Leak● 32
Colección KYC de Alphaex con 15.000 pasaportes y licenciasAn xReactor thread offers roughly 15,000 KYC documents — passports and driving licences — tied to Alphaex customer accounts. The thread sits deep in pagination (page 46), indicating the dump is old and previously circulated rather than a fresh breach. It remains useful for identity-fraud and KYC-verification abuse detection, but is not a fresh alert.Leak● 58
Presunta filtración de documentos y datos de usuarios de BinanceA DarkForums thread (ID 120196) advertises a 2026 leak of Binance internal documentation and customer/user data, though the content is login-walled and unverified. If authentic, it would expose account and possibly KYC data of a major global crypto exchange, fuelling fraud, account takeover and downstream credential abuse. Exchanges and their customers should treat this as a watch item until the dump is confirmed.Leak● 70
Base de datos de Binance con 335 millones de registros a la ventaSeller 'Felixben' advertised a Binance database dated 2026 claiming 335 million records, listed on DarkForums' Leaks Market on 2 November 2026. The volume, if genuine, would cover a large share of the exchange's global user base and exposes identity and contact data usable for phishing, SIM-swap and account takeover. Exchange customers and Binance's fraud teams should assume the data may be used for credential stuffing.Leak● 88
Filtración de la base de datos de la Universidad de Buenos AiresUser 'skyling' posted a database allegedly belonging to the University of Buenos Aires (UBA) on BreachForums on 2 November 2026. UBA is Argentina's largest public university, with student, staff and alumni records that feed directly into public-sector and research networks, so any dumped credentials carry real lateral-movement risk. The dump is fresh and should be treated as an active exposure until scope is confirmed.Leak● 42
Base de datos del registro civil Dukcapil Madiun (Indonesia) publicadaA RaidForums thread publishes a download of the Dukcapil civil-registry database for Madiun regency, Indonesia, which normally holds national ID numbers, family records and addresses. Government identity registries are the highest-value source for synthetic identity fraud and KYC bypass, but the thread appears to be an older repost rather than a new breach. It is worth cataloguing for regional identity-fraud trends rather than alerting as a fresh incident.Leak● 50
Presunta filtración de 11 millones de registros de la francesa ChronopostA DarkForums post advertises an 11-million-record dataset attributed to Chronopost, the French parcel arm of La Poste; the body is login-walled so only the headline claim is visible. Shipping data of that size typically includes names, addresses, phone numbers and tracking numbers, the exact raw material for parcel-phishing campaigns. French logistics and e-commerce customers could see convincing fake delivery notices within days if the data is real.