BRIEFLeakhighP47
Database 'PdiHealt' posted on underground forum
PdiHealt (entidad no confirmada)
Detected10 September 2026 · 16:12 UTC
A newly registered member posted a database file labelled 'PdiHealt_AS_Data' to a darkweb forum, pointing to an exposed health- or PDI-linked dataset. The volume and contents are not yet confirmed, but any medical or police-related records are highly sensitive for credential stuffing, identity theft and downstream fraud. Defenders in the health and public-security sectors should verify whether the data belongs to their organization.
CategoryLeak
Severityhigh
Priority score47
Detected10 September 2026 · 16:12 UTC
Leak● 40
Dump de más de 500.000 credenciales de dominios .com publicadoA VIP-section release dated 24 October 2026 offers a 500K+ ULP (URL:login:password) list covering .com domains, i.e. working-style credentials for named websites rather than free-mail combos. Because the targets are unspecified sites, any .com-hosted service could see employee or customer credentials replayed in credential stuffing and account takeover attempts.Leak● 74
Base de datos de Shopify de la tienda de MrBeast a la ventaThe actor 'beastfeast' is selling a Shopify database of more than 2 million customer records from the MrBeast Store on BreachForums, posted on Saturday 24 October. Such dumps typically contain names, emails, shipping addresses and order histories, enabling phishing, credential stuffing and fraud against buyers. Any e-commerce brand running on Shopify should treat this as a live exposure and verify which of its own records appear in the dump.Leak● 55
Colección de 4,5 TB atribuida a defensa e inteligencia de Israel a la ventaA BreachForums thread in the Databases section claims to offer a 4.5TB 'collection' attributed to Israeli defense, the IDF and Mossad, without verifiable samples or provenance. It is most likely recycled or fabricated scam material, but if genuine it would expose highly sensitive military and intelligence data. Analysts covering Israel-linked or defense-sector interests should validate samples before treating it as a real breach.Leak● 40
Venta de leads de clientes bancarios de España en BreachForumsA seller on BreachForums is advertising 'exclusive, premium quality' Spanish bank leads, which typically consist of customer PII or account-holder data. The source, exact volume and quality are undisclosed and unverified. Spanish financial institutions should treat this as a potential customer-data exposure and watch for downstream fraud.Leak● 46
Volcado del foro de Anson Funds publicado en DarkNetArmyUser lianX posted a forum dump for ansonfunds.com, an investment-management firm, on the DarkNetArmy forum. The dump targets the site's bbPress/php forum and likely exposes user accounts, email addresses and password hashes. It is a fresh leak tied to a named financial entity, so credential-reuse and account-takeover risk should be assessed.Leak● 58
Filtración de la base de datos de Family Farm and HomeA BreachForums thread offers a downloadable database belonging to Family Farm and Home, a US farm-and-home retail chain. The dump exposes customer and operational records that enable phishing, account takeover, and fraud against the retailer and its customers. Because a named organization is directly affected, defenders should treat this as a genuine breach rather than generic chatter.