BRIEFLeakhighP55
BitboxWallet wallet database offered for sale
BitboxWallet
Detected16 September 2026 · 03:12 UTC
A threat actor (Spain74) posted a database allegedly belonging to BitboxWallet, a cryptocurrency wallet service, on BreachForums on 16 September 2026. If genuine, it could expose user account records, emails and wallet-related data for the platform's customers. Crypto wallet leaks are high priority because stolen PII and credentials enable account takeover and financial theft.
CategoryLeak
Severityhigh
Priority score55
Detected16 September 2026 · 03:12 UTC
Leak● 44
Base de datos de 1,2 millones de usuarios de BitMart a la ventaA forum thread titled 'BITMART.COM 1.2 MILLIONS OF USERS LEAKED DATABASE MAIL ADDRESS' advertises a large dataset of email addresses tied to the crypto exchange BitMart. The content is behind a login wall and the date is unknown, and similar BitMart data has circulated in earlier years, so recency is unverified. If genuine and fresh, the emails support phishing and credential-stuffing against exchange customers holding funds.Leak● 58
Filtración de 745 mil contactos de clientes de Cromwell (Reino Unido)A seller on DarkForums is offering roughly 745,000 detailed customer contact records from the UK industrial supplier Cromwell (cromwell.co.uk), including email and contact data. Although the target is not Latin American, it is a sizeable, organisation-specific dataset rather than a generic combolist. Such records fuel phishing and account takeover campaigns against a real B2B supplier and its business customers.Leak● 80
Filtración de base de datos del Hospital Eugenio Espejo de EcuadorActor '3ternal' posted a database labelled HEE-EC for Hospital Eugenio Espejo, a major public hospital in Quito, on DarkForums on 31 October 2026. The data appears to come from a critical healthcare provider, so it may contain patient records, staff accounts and internal contact details. Healthcare leaks enable identity fraud, targeted phishing against public health institutions and extortion of vulnerable patients.Leak● 84
Base de datos del Instituto Nacional de Deportes de Chile filtradaA forum thread advertises a leaked database from Chile's Instituto Nacional de Deportes, a government body under the .cl national domain. Public-sector data of this kind typically contains beneficiary, athlete and staff records, useful for identity fraud and targeted phishing against citizens and officials. The post is gated but time-sensitive: Chilean government entities should assume exposure until disproven.Leak● 52
Base de datos atribuida al Ministerio de Defensa de IsraelA DarkForums post from 30 October 2026 claims to release a database belonging to the Israeli Ministry of Defense. Material attributed to defense ministries is extremely high value for intelligence and espionage if genuine, but this type of claim is also a common lure for scams and malware. The poster's reputation and a sample should be checked before any escalation.Leak● 64
Filtración de datos del portal justice.fr del Ministerio de JusticiaA CSV described as a personal-data extract from justice.fr, the French Ministry of Justice portal, was posted on DarkForums on 30 October 2026. Judicial-portal data typically includes litigants, case references and contact details, which are highly sensitive and useful for judicial impersonation scams. Any confirmed government-portal leak in the EU also carries GDPR notification obligations.