BRIEFLeaklowP40
11 million Poshmark credentials circulating
Poshmark
Detected20 October 2026 · 20:39 UTC
A bulk mail:pass list attributed to Poshmark with roughly 11 million email and password pairs is being re-shared across forums, without a clear original breach date. Large e-commerce credential sets like this fuel account takeover, resale fraud and password-spraying against unrelated services where users reused passwords. Treat it as recycled data for credential-hygiene monitoring rather than a fresh incident.
CategoryLeak
Severitylow
Priority score40
Detected20 October 2026 · 20:39 UTC
Leak● 42
Filtración de base de datos del cartório brasileño 1cartoriosbc.com.brA threat actor posted a username:password database attributed to 1cartoriosbc.com.br, a Brazilian notary (cartório) web service, in a public leak forum. Notary offices hold identity, property and contract records, so even a site-level credential dump can feed account takeover against staff and downstream fraud. It is fresh and regionally relevant, though scale and record sensitivity are not yet confirmed.Leak● 78
Base de datos de vulnerabilidades de Ecuador publicada en foroA dataset titled as an Ecuadorian vulnerabilities database has been shared on a hacking forum, likely cataloguing vulnerable government systems or exposures. Such a list acts as a targeting map for intrusion into public entities and should be triaged against exposed services. It is fresh and tied to an actor actively dumping Ecuadorian state data.Leak● 82
Presunta filtración de 874 GB de datos de FiservA forum user posted a claim of an 874 GB dump allegedly taken from Fiserv, the payments and core-banking processor behind First Data, Clover and hundreds of bank integrations. The volume suggests full database or file-share exfiltration rather than a small combolist. If genuine, downstream fraud, card and account data exposure could hit banks across the US and LatAm correspondents, so the claim should be validated before it spreads.Leak● 62
Filtración de base de datos de la telefónica PTML (Ufone)A fresh thread published yesterday claims to leak a database from Pakistan Telecommunications Mobile Limited (Ufone), a national mobile carrier. Telecom subscriber and employee records of this scale enable SIM-swap, phishing and account-takeover campaigns affecting millions of users. Although outside Latin America, it is a current large-scale leak worth tracking for downstream credential reuse.Leak● 30
Base de datos masiva brasileña de Serasa a la ventaA large Brazilian database attributed to Serasa, Experian's credit bureau, is circulating for sale or leak. Serasa holds credit and consumer financial data, so any genuine breach would be high-impact for fraud and identity theft. However the thread appears old/second-hand, so treat it as likely stale rather than a fresh breach; verify before alerting.Leak● 28
Base de datos de la Embajada de Albania en Moscú filtradaA leak thread from May 2023 claims to expose a database belonging to the Albanian Embassy in Moscow, a diplomatic target. The material is over three years old and concerns a single mission outside Latin America, so it is not a fresh alert. It is noted only as background on sustained targeting of diplomatic entities, which defenders of government networks may find contextual.