BRIEFLeakhighP58
US healthcare personnel medical database offered for sale
US healthcare personnel
Detected7 November 2026 · 15:43 UTC
A BreachForums actor claims to be selling a medical database covering healthcare personnel across the United States with full details. If authentic, the dataset would expose sensitive personal and professional records of medical workers at national scale. Such data fuels identity theft, credential stuffing and targeted fraud against healthcare organizations.
CategoryLeak
Severityhigh
Priority score58
Detected7 November 2026 · 15:43 UTC
LeakPriority 52
Base de datos de la Universidad de Camarines Norte (Filipinas) filtradaA thread on BreachForums advertises the database of the University of Camarines Norte in the Philippines, tagged as a 2026 breach. A university database typically contains student and staff personal records, contact details and enrollment data, which enable identity theft and targeted phishing against the institution. Affected individuals and the university should treat the data as compromised.LeakPriority 58
Filtración de la base de datos de SplitVPN (NotVPN) con 23,4 millones de usuariosA dataset attributed to the VPN provider SplitVPN (NotVPN) is being circulated on the xReactor forum, reportedly covering 23.4 million user accounts, 58 million activity logs and 13.6 million device records. VPN subscriber data exposes identities, payment details and connection metadata, which attackers can use for account takeover, targeted phishing and deanonymization. Organizations relying on this or similar third-party VPN services should treat it as an exposure event.LeakPriority 55
Filtración de base de datos de la minorista Spencer's (EE. UU.)A database dump attributed to US retail chain Spencer's (spencers.com) was posted on BreachForums/DarkForums by actor scarlettgroup on 7 November 2026. As a national retail brand, Spencer's holds customer PII, loyalty and possibly transaction records, all attractive for fraud. The posting is fresh and the same data is being re-shared across forums quickly.LeakPriority 38
Base de datos de AU Small Finance Bank (India) a la ventaThe Darkpro carding forum advertises a database attributed to AU Small Finance Bank, an Indian scheduled commercial bank, with no stated record count or date. If authentic, customer or KYC data of a regulated bank is circulating, enabling fraud and targeted phishing against account holders. Scale and authenticity are unverified, so this is a low-confidence lead worth monitoring.LeakPriority 42
Filtración de base de datos de la estatal PT Surveyor IndonesiaThe actor 'Sophia' posted on DarkForums an alleged ~12,000-record dump of E-Pengadaan, the e-procurement platform of PT Surveyor Indonesia, a state-owned inspection firm. Procurement data exposes supplier contacts, contracts and staff emails usable for targeted phishing. Scale is modest and the date is unconfirmed, so it is a watch item rather than an alert.LeakPriority 46
Colección de base de datos de Virtue Maritime ShipmanagementA database collection attributed to Virtue Maritime Shipmanagement Corporation was posted in the BreachForums Leaks section. Maritime crewing and staffing records can expose seafarer personal data, identity documents and operational contact details. The full scale is unconfirmed, but ship operators and crewing agencies linked to the firm should assess exposure.