BRIEFLeakhighP52
Xiaomi China database published on hacking forum
Xiaomi
Detected12 November 2026 · 18:14 UTC
Threat actor 'Myra' posted a Xiaomi China database on SpyHackerz on October 30, 2026, including CSV files of service orders and related operational records. Exposure of a major electronics vendor's internal data can fuel phishing, warranty fraud and account takeover. Verify scope and monitor for reuse of the leaked records.
CategoryLeak
Severityhigh
Priority score52
Detected12 November 2026 · 18:14 UTC
LeakPriority 28
Filtración de base de datos de Ahorra Seguros (25.000 registros)User 'blasphemus' posted a database of Ahorra Seguros containing roughly 25,000 records on DarkForums in November 2026. The volume is small, but insurance data can enable fraud and targeted phishing against policyholders. Verify the authenticity, the source of access and whether sensitive personal data is included.LeakPriority 40
Base de datos del dominio gubernamental francés osmose.numerique.gouv.fr filtradaA RaidForums thread offers for free a database apparently tied to the French government domain osmose.numerique.gouv.fr, a .gouv.fr service. If current, exposure of public-sector records is significant for French government defenders. The thread appears to originate from older RaidForums activity, so treat it as likely stale but verify scope and recency.LeakPriority 46
Venta de datos de FENIE Energía, del sector eléctrico españolSeller 'Leadstock' is offering data belonging to FENIE Energía, a Spanish electricity-sector entity, in the DarkForums marketplace. Energy-sector data is sensitive given its link to critical infrastructure and can enable fraud or targeted outreach to industry firms. Verify the authenticity and scope of the offered dataset.LeakPriority 44
12 millones de credenciales de romwe.com circulan en xReactorA 12-million-record email:password dataset for romwe.com, an online fashion retailer, is being circulated on the xReactor forums. Such volumes of credentials enable credential stuffing against the retailer and reuse attacks on linked accounts. Users should reset passwords and enable MFA, and the company should hunt for account takeovers.LeakPriority 46
Filtración de datos de clientes de Dyson anunciada en BreachForumsA collection labeled 'Dyson massive data leak 2026' is being auto-delivered on BreachForums, advertising a large trove of customer data from the appliance maker. If authentic, it exposes personal and order information useful for phishing and fraud. Treat as unverified until sample data is confirmed.LeakPriority 52
Base de datos de Truecaller India filtrada para descargaA Truecaller India database is being distributed for download on BreachForums, exposing phone numbers and related subscriber details for a large user base. Such data fuels SIM-swap, vishing and account takeover attacks at scale. Indian users and telecom stakeholders should warn customers and monitor for abuse.