BRIEFLeakhighP68
Stolen Ledger database with 309,000 records for sale
Ledger
Detected21 September 2026 · 09:37 UTC
A seller claims to hold a stolen 2026 Ledger database of about 309,000 records and is offering it for sale. Ledger is a major crypto hardware-wallet vendor, so the data can fuel phishing and targeted attacks against wallet holders. Fresh customer-database leaks of this scale enable credential stuffing and social engineering against high-value crypto targets.
CategoryLeak
Severityhigh
Priority score68
Detected21 September 2026 · 09:37 UTC
Leak● 30
Registros de usuarios de los Tribunales de California filtradosPrivate user records allegedly from the California Courts system have been posted for free on a leak forum. The thread is dated January 2026, making it a stale government-data exposure rather than a fresh alert. It still matters for identifying re-used court-account credentials and downstream targeting.Leak● 45
Filtración de 3,8 millones de usuarios de Zain Telecom IrakA database of about 3.8 million Zain Telecom Iraq users is being distributed on a cracking forum, containing subscriber data that can enable SIM-related fraud and targeted attacks. The post, however, appears to be a repost of an older Zain leak, so its freshness is doubtful. Treat as background context rather than a fresh alert.Leak● 52
Base de datos de 182.000 tarjetas de crédito filtrada en 2026A database of roughly 182,000 credit cards labelled as a new 2026 leak is being distributed on an underground forum. It provides ready-to-use payment-card data for fraud and carding. Fresh card dumps drive fraud losses and can be cross-referenced with regional BINs to identify affected issuing banks.Leak● 66
Filtración de la base de datos de Ledger con 309.000 registrosA seller posted a claimed 'stolen 2026' Ledger database of 309,000 records on a leak forum, targeting a major crypto hardware-wallet vendor's customer base. Customer lists from crypto firms are high-value for phishing, SIM-swap and extortion campaigns against holders of digital assets. Defenders should verify the dataset, warn affected users and monitor for targeted wallet-related social engineering.Leak● 66
Filtración de la base de datos del CONALEP de MorelosA full database of CONALEP de Morelos with 24,000+ records was posted for download, exposing student and staff data from a Mexican public education institution. Leaked academic records enable identity theft, credential abuse and targeted phishing against students and employees. Education entities are frequently used as pivot points into connected government services, so defenders should validate the records and rotate affected credentials.Leak● 20
Filtración de datos de empleados de BSI (CSV de 2023)A CSV file containing employee data labelled 'BSI' is being reposted on a breach forum, tagged with a May 2023 reference date. The dataset is old and the affected organization is not clearly identified, which limits its operational value. It matters only as background context, not as a fresh alert requiring immediate response.