BRIEFLeakhighP60
Russian retailer Wildberries database offered for sale
Wildberries
Detected20 October 2026 · 15:39 UTC
A seller is advertising a 2026 database from Wildberries, Russia's largest online retailer, which would contain vast customer, order and contact data. Retail datasets of this size fuel credential stuffing, phishing and parcel/order fraud across a large user base. The post is fresh, so it should be tracked for sample verification and downstream reuse.
CategoryLeak
Severityhigh
Priority score60
Detected20 October 2026 · 15:39 UTC
Leak● 48
Copia de seguridad SQL de un sitio web de Panamá a la ventaA forum listing advertises a SQL backup taken from a Panama-based website, potentially exposing user accounts, contact data and administrative records. If the site belongs to a public or regulated entity, the impact extends to citizens and downstream services in the region. The organization is not clearly identified and the date is unknown, so this needs validation before escalation.Leak● 58
Filtración de base de datos de 22 millones de usuarios de YouNowA full-platform export of YouNow with 22 million user records is being offered for download, likely including emails, usernames and profile data. Leaks of this size enable credential stuffing against other services and targeted harassment or phishing of users. The listing date is unclear, so verify recency before treating it as a new incident.Leak● 60
Base de datos de inversores de Vanguard Group a la ventaA seller claims to hold a database of The Vanguard Group, the US asset-management giant, covering mutual-fund, ETF and stock investors. Financial investor data is high-value for targeted phishing, account takeover and identity fraud, and can be cross-referenced against brokerage accounts. The listing is minutes old, so validation and customer-notification work should start now.Leak● 62
Base de datos del banco HSBC con 175.000 registros filtradaA 175,000-record database attributed to HSBC is being distributed free, likely containing customer or account data. Even a partial banking dataset exposes individuals to phishing, account takeover and social-engineering fraud, and pressures the institution's fraud teams. The date is unclear, so treat as unverified but worth monitoring for credential and PII reuse.Leak● 70
Base de datos de 16 millones de registros de Punjab Land Records a la ventaA seller is offering a 16-million-record dataset allegedly taken from the Punjab Land Records Authority, a government body holding land-ownership and citizen identity data. Records of this scale enable mass identity theft, targeted impersonation and fraud against citizens, plus downstream attacks on linked services. The post is only hours old, giving defenders a short window to warn affected parties and monitor for reuse of the data.Leak● 45
Base de datos de 11 millones de cuentas de Poshmark en circulaciónAn 11 million line Poshmark email:password dataset is circulating in an exchange thread that appears to be aged rather than a fresh breach. Credentials enable credential-stuffing against Poshmark and, through reuse, other accounts. Because the thread looks stale, value is mostly baseline fraud intelligence rather than a new incident.