BRIEFLeaklowP38
Russian Rosreestr real estate registry breach (48GB)
Rosreestr
Detected20 September 2026 · 19:37 UTC
A 48 GB dataset attributed to Russia's Rosreestr land and property registry is being advertised, a government record leak of significant scale. However, the post dates to late December 2025, so it is not a fresh alert and its impact is confined to Russia, outside the AR-LATAM focus. Worth noting for context on exposed state registries but not urgent action.
CategoryLeak
Severitylow
Priority score38
Detected20 September 2026 · 19:37 UTC
Leak● 34
Base de datos de fullz de EE. UU. a la ventaA freshly posted thread advertises a database of US fullz, the identity packages (name, SSN/DOB, address and card data) prized by fraudsters. Fullz fuel account takeover, new-account fraud and loan/credit abuse at scale. It is not tied to the region but is a real ongoing leak worth tracking for downstream fraud.Leak● 44
Filtración de 1,2 millones de cuentas Gmail de IsraelA user claims to have leaked a 1.2 million record database of Gmail addresses and phone numbers allegedly tied to Israeli users. Even without passwords, the email-to-phone mapping enables mass phishing, smishing and social-engineering campaigns. It is a sizeable regional PII leak worth flagging to fraud/identity teams.Leak● 52
Venta de filtración cripto con 6,3 millones de filasA seller is offering a 6.3 million row dataset combining names, emails, phone numbers and countries, apparently aggregated from multiple crypto-related breaches. The PII mix of email plus phone is directly usable for credential stuffing, targeted phishing and SIM-swap attacks. Defenders in finance/crypto should verify whether their users appear in this set and alert on credential reuse.Leak● 45
Filtración de 5,3 GB de la financiera ucraniana CashPoint.uaA 5.3 GB dataset from CashPoint.ua, a Ukrainian microfinance lender, has been leaked and is being distributed freely. It likely contains customer PII and loan records enabling identity theft and targeted phishing against borrowers. Financial-sector defenders should monitor the exposure and warn impacted customers.Leak● 52
Datos de clientes de Binance Australia a la ventaA seller on DarkForums is offering customer data belonging to Binance Australia, a regulated crypto exchange. Such records can include identity/KYC details useful for fraud and targeted phishing. Australian financial authorities and Binance users should be notified to watch for account abuse.Leak● 55
Base de datos de 109.392 usuarios de Coinbase con saldo a la ventaA DarkForums listing advertises a database of 109,392 Coinbase users whose accounts still hold balances, indicating often-viable credentials and financial data. Funded crypto accounts are high-value for account takeover and laundering. Exchange security teams and customers should be alerted to potential credential exposure.