PULSE
FEED
Kalir Brief · Item19 September 2026 · 15:12 UTC
BRIEFLeakhighP72

Stolen Ledger database (309,000 records) for sale

Ledger

Detected19 September 2026 · 15:12 UTC
Why it matters

A seller is offering a stolen Ledger database claimed to contain roughly 309,000 records from 2026. Ledger is a major hardware-wallet vendor whose customer data is highly prized by crypto-targeting actors. A fresh leak of this size enables targeted phishing, SIM-swap and extortion campaigns against crypto holders, so it warrants monitoring and customer-notification action.

MetadataRECORD
CategoryLeak
Severityhigh
Priority score72
Detected19 September 2026 · 15:12 UTC
Related items6
Leak● 64
Venta de datos de salud de NSW Health (Australia)A seller on the Spear forum is offering data belonging to NSW Health, Australia's largest public health system, in a thread posted about an hour ago. Public health records carry sensitive clinical and identity data affecting millions of patients. Though outside Latin America, the government-sector victim and freshness warrant monitoring for downstream credential abuse.
30m
Leak● 72
Venta de datos biométricos y fotos de figuras públicas colombianasA DarkForums seller is advertising biometric data and photographs of Colombian artists, influencers, singers and even presidents. Biometric material cannot be reset and is highly attractive for identity fraud, impersonation and targeted extortion against high-profile figures. The exact date is unconfirmed, but the political exposure makes it a priority lead for Colombian authorities.
30m
Leak● 76
ShinyHunters publica 3,3 TB de datos de DexComShinyHunters posted a 3.3 TB dataset attributed to DexCom, a major US continuous glucose monitoring manufacturer, on PwsForums, with thread activity within the last hour. The volume points to large-scale corporate and possibly patient-related records. Healthcare device makers are high-value targets, and exposure of clinical or customer data carries regulatory and patient-safety implications.
30m
Leak● 82
Base de datos de ciudadanos ecuatorianos a la venta en DarkForumsA seller using the handle FURTADO posted on DarkForums on 3 November 2026 offering a database of Ecuadorian citizens. If genuine, it exposes national identity data that enables identity theft, credential abuse and targeted fraud against residents. Defenders in Ecuador's public and financial sectors should verify exposure and warn affected citizens.
30m
Leak● 71
Venta de datos robados del servicio de salud NSW (Australia)The seller 'bytetobreach' on the Spear forum is advertising what appears to be stolen data tied to NSW Health, an Australian state health authority. Patient and operational health data is highly sensitive and its sale exposes individuals and the organization to fraud and reputational harm. A named critical-infrastructure health body makes this a priority item to track.
2h
Leak● 41
Base de datos CRM del concesionario francés Distinxion a la ventaA seller advertises a French dataset described as 518K CRM contacts, 291K emails and 410K phones (57 MB) attributed to the Distinxion used-car network. The volume is consistent with a full customer-relationship export rather than a scraped list, though the thread is login-walled and undated. Exposed CRM data of a dealership group supports vehicle-financing fraud, insurance impersonation and convincing phishing of buyers.
3h