BRIEFLeakhighP66
Bank of America database allegedly leaked
Bank of America
Detected19 October 2026 · 19:39 UTC
A DarkForums thread claims to leak a database from Bank of America, one of the largest US financial institutions. Such claims are often repackaged or fabricated, but if genuine it would expose customer PII and financial data at massive scale. Worth triage and verification given the target's systemic importance.
CategoryLeak
Severityhigh
Priority score66
Detected19 October 2026 · 19:39 UTC
Leak● 48
Presunta filtración de base de datos de empleados de YouTubeAn item claims to leak a YouTube employee database, which if genuine would expose internal staff PII valuable for targeted phishing and social engineering against a major platform. The claim is unverified and scale is unknown from the snippet. Worth sampling to confirm before elevating, since employee data can enable secondary access attempts.Leak● 55
Base de datos de Change Healthcare (201 GB) redistribuidaA 201 GB Change Healthcare dataset is being re-posted; this matches the previously known major US healthcare breach, so the content is likely stale re-circulation rather than a new incident. Still, it contains highly sensitive patient data whose reuse in medical fraud and phishing persists. Flag as known-but-relevant, not a fresh victim alert.Leak● 60
Base de datos de Reddit de 80 GB (2026) ofrecida en foroA freshly posted 80 GB Reddit dataset dated 2026 is being shared, potentially containing user records such as emails and activity metadata. Reddit is a global platform, but a leak of this size enables credential-stuffing and phishing against a huge user base with reach into LATAM organizations. Treat as unverified until sampled, but monitor for reuse of Reddit-linked emails in corporates accounts.Leak● 62
Base de datos de Fidelity Digital Assets (288,8 GB) a la ventaA 288.8 GB dataset spread across 13 record sets is being offered, attributed to Fidelity Digital Assets, a major financial/crypto custodian. If genuine, this is a very large financial-sector exposure affecting institutional and client data that could fuel BEC and account-takeover campaigns. Financial institutions and their LATAM counterparties should watch for downstream credential or account abuse.Leak● 90
Filtración de 120,7 millones de registros de educación de São Paulo, BrasilA freshly posted 120.7 million-record database attributed to São Paulo state education is being offered, likely containing student and staff PII such as names, IDs and contact data. Brazil is a core LATAM critical-sector target, and an education dataset of this scale enables large-scale identity fraud and phishing against minors and public employees. Defenders in AR-LATAM should treat this as a high-priority exposure and monitor for credential reuse across .edu and gov-linked accounts.Leak● 45
Datos de clientes del Bangladesh Bank a la ventaCustomer data attributed to Bangladesh Bank is being advertised on DarkForums, a central bank that has suffered high-profile breaches before. Leaked customer records enable fraud and account takeover. Regional relevance is limited but the target's status as a central bank warrants a look.