BRIEFLeakhighP65
Stolen Ledger database (309,000 records) for sale
Ledger
Detected17 September 2026 · 18:12 UTC
A listing claims to offer a stolen Ledger database containing 309,000 records dated 2026. Ledger is a major crypto-hardware wallet vendor, and customer-data leaks erode trust and feed targeted phishing and extortion against high-value crypto holders. It is unverified, but given the brand's breach history it merits monitoring.
CategoryLeak
Severityhigh
Priority score65
Detected17 September 2026 · 18:12 UTC
Leak● 45
Filtración de 56.000 clientes de Energynet SerbiaA database of 56,000+ customers of Serbia's Energynet (HVAC services) was shared on DarkForums, exposing names, contact and address details. Though outside Latin America, it is a concrete company leak useful for phishing and fraud campaigns. Lower regional priority, but it confirms an active seller of real corporate data.Leak● 55
Volcado masivo de 1.200 millones de credenciales (44 GB)A 44 GB dump containing roughly 1.2 billion URL:login:password lines was posted on 15 September 2026. This is a very large stealer-log aggregation, implying massive credential-reuse risk across corporate and consumer accounts. Defenders should enable credential-leak detection and force resets for exposed users.Leak● 62
Filtración de la base de datos central de VodafoneA threat actor claims to have compromised Vodafone's core database and posted an encrypted drop on a cloned forum. Vodafone is a major global telecom, so a core database leak could expose subscriber and infrastructure data at scale. Defenders in telecom should treat this as a possible exposure pending verification.Leak● 42
Filtración de datos de John Lewis, Currys y American AirlinesA leak thread offers data linked to UK retailers John Lewis, Currys and PC World plus US airlines American Airlines and Southwest. Collections like this usually contain customer accounts and credentials that feed fraud and account takeover. It is outside LatAm, but the airlines' reach makes it worth tracking.Leak● 55
Base de datos de Samsung a la venta en foro clandestinoA freshly posted thread on a darkweb forum claims a Samsung database is up for grabs, potentially exposing customer or corporate records of the global electronics giant. If genuine, such data would support fraud, account takeover and targeted attacks. Authenticity and scale are unverified, so treat it as an unconfirmed lead.Leak● 60
Volcado de datos de Sudamérica con datos de Argentina y BrasilA criminal forum post advertises a verified South America data dump covering Argentina, Brazil, Chile and more, likely credentials or personal data. Such region-specific collections enable account takeover and targeted phishing against Latin American organizations. Local defenders should hunt for reuse of these leaked credentials.