BRIEFLeakhighP50
50 million-record Indonesian database published
JakartaGhostDigital
Detected17 September 2026 · 07:12 UTC
A 50-million-record Indonesian database attributed to 'JakartaGhostDigital' is being shared on a forum. At this scale it likely contains citizen PII usable for fraud and account takeover. The target is outside the region and there is no reliable timestamp, so it is recorded but not treated as a fresh alert.
CategoryLeak
Severityhigh
Priority score50
Detected17 September 2026 · 07:12 UTC
Leak● 66
Filtración de la base de datos de Cultura.com con 2 millonesDarkForums user Wraxniter published a database attributed to French cultural retailer Cultura.com on October 31, 2026, claiming 2 million records. The data likely includes customer account details that can support phishing, account takeover, and credential reuse. Although smaller than other leaks, it is fresh and tied to a real retailer with a large customer base.Leak● 76
Filtración de 31,1 millones de registros de FitnessParkOn October 31, 2026, DarkForums user Lynyetol posted a database attributed to French gym chain FitnessPark with 31.10 million records. The volume suggests customer names, emails, phones, and possibly credentials, which are valuable for phishing and credential-stuffing. French organizations and FitnessPark customers should treat the exposure as a fresh, large-scale leak.Leak● 80
Filtración de datos de 31,1 millones de ciudadanos israelíesDarkForums user Torramyr posted a 31.10 million-record dataset labeled as Israeli citizens' data on October 31, 2026. If authentic, the scale exposes national PII that can fuel identity theft, phishing, and impersonation campaigns. The freshness and volume make it a high-priority leak for Israeli organizations and defenders monitoring regional exposure.Leak● 88
Filtración de facturas del Instituto de Movilidad de Quintana RooA DarkForums thread exposes invoices from Mexico's Quintana Roo state mobility institute (IMOVEQROO), potentially revealing taxpayer names, amounts, addresses, and supplier data. As a government body, the exposure can enable fraud, impersonation, and targeted attacks against official procedures and payments. Defenders should verify the dataset and notify authorities if the leak is confirmed.Leak● 40
Brecha de datos en un revendedor de hardware de LedgerA thread titled 'LEDGER HARDWARE CRYPTO RESELLER BREACH' was posted on an underground forum, indicating leaked customer data from a reseller of Ledger hardware wallets. Such data typically includes names, addresses and order history, which historically fuels physical-threat and phishing campaigns against crypto holders. The content is login-walled and undated, so scale and recency cannot be confirmed, but the topic is relevant for crypto-asset defenders.Leak● 45
Filtración de base de datos de SquareTrade con 911.000 cuentasA RaidForums clone is offering a free download of a SquareTrade.com database containing roughly 911,000 user accounts and 41.4 million records. The dataset exposes customer contact and account details of a large US device-protection/insurance provider. Because the post has no recent date and this breach has circulated for years, it is a repost rather than a fresh incident, but it can still fuel credential-stuffing and phishing.