BRIEFLeakhighP56
Cyprus government gigavoucher.dmrid.gov.cy customer database leaked
gigavoucher.dmrid.gov.cy (Gobierno de Chipre)
Detected20 October 2026 · 16:39 UTC
A forum user is offering a customer database allegedly taken from gigavoucher.dmrid.gov.cy, a Cyprus government (.gov.cy) service portal tied to the shipping ministry. Government customer records typically include names, identifiers, emails and contact details that enable targeted phishing and account takeover against public services. The post date is ambiguous and may be several months old, so it ranks below fresh alerts but remains relevant for any entity transacting with Cypriot government portals.
CategoryLeak
Severityhigh
Priority score56
Detected20 October 2026 · 16:39 UTC
Leak● 74
Filtración de base de datos del Ministerio de Salud de Francia (sante.gouv.fr)A threat actor is distributing a database allegedly extracted from sante.gouv.fr, the French Ministry of Health portal, posted on DarkForums within the last day. Although the record count and schema are not yet confirmed, a leak from a national health ministry exposes civil-servant and citizen contact data and is a credible precursor to phishing, credential stuffing and lateral movement against public health infrastructure. Defenders in EU public-sector and healthcare supply chains should monitor for related credential reuse.Leak● 48
Copia de seguridad SQL de un sitio web de Panamá a la ventaA forum listing advertises a SQL backup taken from a Panama-based website, potentially exposing user accounts, contact data and administrative records. If the site belongs to a public or regulated entity, the impact extends to citizens and downstream services in the region. The organization is not clearly identified and the date is unknown, so this needs validation before escalation.Leak● 58
Filtración de base de datos de 22 millones de usuarios de YouNowA full-platform export of YouNow with 22 million user records is being offered for download, likely including emails, usernames and profile data. Leaks of this size enable credential stuffing against other services and targeted harassment or phishing of users. The listing date is unclear, so verify recency before treating it as a new incident.Leak● 60
Base de datos del minorista ruso Wildberries a la ventaA seller is advertising a 2026 database from Wildberries, Russia's largest online retailer, which would contain vast customer, order and contact data. Retail datasets of this size fuel credential stuffing, phishing and parcel/order fraud across a large user base. The post is fresh, so it should be tracked for sample verification and downstream reuse.Leak● 60
Base de datos de inversores de Vanguard Group a la ventaA seller claims to hold a database of The Vanguard Group, the US asset-management giant, covering mutual-fund, ETF and stock investors. Financial investor data is high-value for targeted phishing, account takeover and identity fraud, and can be cross-referenced against brokerage accounts. The listing is minutes old, so validation and customer-notification work should start now.Leak● 62
Base de datos del banco HSBC con 175.000 registros filtradaA 175,000-record database attributed to HSBC is being distributed free, likely containing customer or account data. Even a partial banking dataset exposes individuals to phishing, account takeover and social-engineering fraud, and pressures the institution's fraud teams. The date is unclear, so treat as unverified but worth monitoring for credential and PII reuse.