BRIEFLeaklowP40
CraveOnline.co.uk site database posted on forum
CraveOnline
Detected11 September 2026 · 21:12 UTC
A database attributed to the UK entertainment site CraveOnline.co.uk has been posted for sharing on a leak forum. The post claims account data from the site, which enables credential reuse and phishing against its users. Such leaks matter because reused passwords often unlock corporate and government accounts elsewhere.
CategoryLeak
Severitylow
Priority score40
Detected11 September 2026 · 21:12 UTC
Leak● 30
Combolist de 8 millones de credenciales usuario-contraseña a la ventaA forum user on xReactor published a fresh combolist of roughly 8 million email:password pairs, marketed as newly checked. The dump has no single named victim, so its main value is as fuel for credential stuffing and password spraying against any organization with weak MFA. Defenders should assume some corporate accounts may appear once the file propagates and proactively force resets on any exposed mail domains.Leak● 38
Filtración de la base de datos de la armería Guns.comThe pwnfrm leak forum lists a downloadable dump attributed to Guns.com, a US firearms and outdoor retailer. Customer records from a firearms seller are elevated-risk because they tie real identities to specific purchases, aiding extortion, burglary targeting and fraud. The post is behind a login wall with no sample, date or record count, so scale and recency are unverified.Leak● 40
Colección de bases de datos de votantes de Estados UnidosA leak-aggregator thread on the pwnfrm forum offers a bundle of US voter registration databases for download. Voter files expose names, home addresses, party affiliation and phone numbers at national scale, which fuels doxxing, targeted disinformation and impersonation. The thread is login-walled with no sample, date or record count, so freshness and scope cannot be confirmed.Leak● 55
Filtración de la base de datos del portal estatal ruso GosuslugiUser DBHunter advertised on the DarkNetArmy forum a 2025 dump of gosuslugi.ru, Russia's unified government-services portal holding identity, property, benefits and family records. If authentic, this is a high-value state identity dataset ideal for impersonation, document fraud and targeted phishing. The post is roughly two months old and its authenticity and record count are unverified.
Leak● 48
Filtración de datos del gobierno de Pamekasan (go.id), IndonesiaForum member SUB-ZER0 posted on the DarkNetArmy onion forum a leak of data tied to pamekasankab.go.id, the site of Indonesia's Pamekasan Regency government, marked as posted today. Regional government records typically contain citizen identifiers and internal staff data, making this a genuine government breach rather than carding noise. Defenders should verify the scope and whether the dataset is being redistributed.Leak● 58
Filtración de 300.000 clientes de OrionTelekom (Serbia)A threat actor is offering a 300,000-customer database belonging to Serbian telecom OrionTelekom (oriontelekom.rs), including a sample for verification. Telecom subscriber data enables SIM-swap, phishing and identity fraud against customers and staff. It is a serious leak for a named critical-infrastructure operator, even though it sits outside the LATAM region.