BRIEFLeaklowP40
Russian Pension Fund (PFR) database of 100M+ records offered for sale
Pension Fund of the Russian Federation (PFR)
Detected3 November 2026 · 21:24 UTC
Reposts collapsed2
A seller on a RaidForums mirror claims to offer a database of the Russian Pension Fund (PFR) containing over 100 million records. If genuine, it would expose massive volumes of citizens' personal and pension data useful for identity fraud and targeted attacks. The claim circulates on a now-defunct forum and is likely old, so it is background intelligence rather than a fresh alert.
CategoryLeak
Severitylow
Priority score40
Detected3 November 2026 · 21:24 UTC
Leak● 45
Base de datos de 31 GB del sitio de apuestas Cenabet filtradaA 31 GB database belonging to Cenabet, a Turkish online betting operator, is being shared on the SpyHackerz forum. The dump likely contains customer accounts, balances and transaction data valuable for account takeover and payment fraud. Posted in mid-2026, it is a few months old but still relevant for credential and payment monitoring.Leak● 62
Filtración de 144.000 archivos y contratos de Renault S.A.A threat actor on BreachForums is distributing 144,000 files allegedly stolen from Renault S.A., including internal data, invoices and contracts. The volume points to a substantial corporate breach affecting supplier and business records of a major automaker with significant operations across Latin America (Argentina, Brazil, Colombia). Defenders should check whether partner contracts, pricing or credentials surface in the dump.Leak● 26
Venta de un volcado del ERP de un colegio K-12 de Emiratos Árabes UnidosA seller on BDF Club is advertising a database dump taken from the ERP system of a K-12 school in the United Arab Emirates. School ERP platforms typically hold student, parent, staff and billing records, so the data can support identity theft and highly targeted phishing of families and teachers. It is a single-institution leak with no government or critical-infrastructure angle and no visible date, so it ranks low for regional alerting.Leak● 46
Filtración de datos de Norauto Francia difundida en TelegramA DarkForums thread claims that customer data from Norauto, a major French automotive service chain, was leaked and is being circulated through Telegram channels. Retail and workshop records typically include names, contact details, vehicle information and service history, which support phishing and fraud against customers. The post date is unclear, so the leak may be older than the current monitoring window.Leak● 62
Base de datos del aeropuerto de Manchester ofrecida en un foroA PwsForums user (Selena Data) posted a thread titled 'Complete Manchester Airport databases' in the forum's Database leak section, claiming a full dump of the airport's data is available. Airports are critical transport infrastructure, so staff, contractor and operational data can fuel credential stuffing, targeted phishing and reconnaissance against aviation systems. The thread's own date is not visible in the excerpt, so the recency and authenticity of the dump need verification before treating it as confirmed.Leak● 74
Base de datos de UFINET LATAM: 1.759 correos y mapa de fibraA dataset attributed to UFINET LATAM was posted on DarkForums, allegedly containing 44 carrier partners, 1,759 corporate email addresses and a geo-mapped inventory of its fibre plant. Publishing backbone topology and partner relationships is high risk for a wholesale telecom operator serving several Latin American countries, because it hands attackers targeting information for network and physical infrastructure. The corporate emails also enable credential stuffing and targeted phishing against staff with privileged access.