BRIEFLeakhighP58
Stolen Ledger database (309,000 records) offered for sale
Ledger
Detected26 September 2026 · 09:16 UTC
A threat actor (Gogi_data) is circulating a claimed 2026 Ledger customer database of about 309,000 records, cross-posted on DarkNetArmy, BlackBones, SpyHackerz and LEET. Ledger sells crypto hardware wallets, so leaked customer PII (names, emails, addresses, phones) directly fuels targeted phishing, SIM-swap and even physical-threat campaigns against high-value crypto holders. Defenders should treat affected users as at elevated risk and watch for credential reuse.
CategoryLeak
Severityhigh
Priority score58
Detected26 September 2026 · 09:16 UTC
Leak● 40
Publicadas 21 millones de credenciales en un volcado ULPA fresh dump of about 21 million URL:login:password (ULP) stealer-log entries was posted today. Such large credential sets fuel credential stuffing against corporate VPNs, webmail and SaaS. No specific victim is named, but the scale makes it a high-volume source for account-takeover attempts.Leak● 48
Filtrada la base de datos del sitio de salud húngaro diagnozis.huA Hungarian health/medicine website, diagnozis.hu, has been breached and its full database leaked by the actor 'Sophia'. Health-sector data is sensitive personal information subject to strict regulation and can be abused for medical fraud and targeted phishing. The fresh leak warrants monitoring of reused credentials and downstream exposure.Leak● 60
Base de datos de 7 GB de etestify.com (España) a la ventaA seller is offering a 7 GB SQL database of Spain's etestify.com containing roughly 84,000 member records, posted within the last hour. It includes customer/member personal data that can fuel phishing and account takeover against Spanish users. Because it is fresh and tied to a real Spanish company, credential-stuffing and fraud campaigns are likely.Leak● 66
Filtración de 45 GB de datos aduaneros de Indonesia (beacukai.go.id)A 45 GB trove (437 files, 41 Power BI semantic models) from Indonesia's Directorate General of Customs and Excise (beacukai.go.id) is being leaked, exposing customs analytics and trade data. Government customs records can reveal import/export flows, entity data and internal dashboards useful for fraud and targeting. Defenders in trade, logistics and finance should monitor for downstream abuse.Leak● 20
Base de datos de Silver Falls Capital publicada en foro (2025)A database attributed to Silver Falls Capital was posted on a leak forum, but the thread dates to August 2025 and gives no record count or data samples. It is a stale, unverified leak with limited current value. Flagged only for completeness.Leak● 45
Filtración de base de datos de la canadiense instantfunding.caA 1.54 GB database said to belong to Canadian lender instantfunding.ca, about 613,447 records, has been posted. If authentic, it exposes customer financial and contact data useful for fraud and targeted phishing. The victim is outside Latin America, but its size and financial sector make it notable.