BRIEFLeaklowP45
One million Mexican credential combolist posted
México (credenciales email:pass)
Detected13 October 2026 · 20:53 UTC
A recently posted combolist contains about one million email:password pairs reportedly tied to Mexico. While generic combolists are common, a dataset of this size focused on one country still fuels credential stuffing and account takeover against Mexican users and organizations. Defenders should enforce credential hygiene and block reused passwords.
CategoryLeak
Severitylow
Priority score45
Detected13 October 2026 · 20:53 UTC
Leak● 44
Filtración del código fuente privado de McDonald'sA threat actor is sharing what they claim is McDonald's private source code on a leak forum. Proprietary code can reveal internal logic, vulnerabilities and potentially embedded secrets or credentials, aiding follow-on attacks. The company should assess whether any keys or credentials were exposed.Leak● 45
A la venta base de datos de 92.000 registros de lindyproperty.com (EE.UU.)A seller is offering a 92,000-record database from US property firm lindyproperty.com. The dump exposes client and business data usable for fraud and targeted phishing. Though mid-sized and US-based, it is a real corporate data sale worth flagging for downstream identity abuse.Leak● 52
Filtración de la base de datos de Salesfloor.netA full database dump of Salesfloor.net, a US retail workforce platform, has been published on a leak forum. This exposes customer and employee data of a real company, enabling phishing and credential abuse against its users. Defenders should monitor for reuse of leaked identities in account-takeover attempts.Leak● 72
Filtración de base de datos de zirconite.es, colaborador de Iberdrola (153K registros)A 153,000-row database linked to zirconite.es, described as an official Iberdrola collaborator, is circulating on a leak forum. The data sits in the Spanish energy sector, which is critical infrastructure, and can fuel phishing and account takeover against the utility and its supply chain. Iberdrola and its partners should treat this as a supply-chain exposure and hunt for credential reuse.Leak● 78
Brecha en LexisNexis expone datos de agencias gubernamentales de EE.UU. y despachos legalesA threat actor claims a fresh breach of LexisNexis, exposing legal-intelligence data tied to US government agencies and law firms. This is high-value material that enables targeted social engineering, doxxing and credential abuse against legal and public-sector targets. Organizations relying on LexisNexis should watch for downstream phishing and verify account integrity.Leak● 68
Venta de datos de DNI y correos de ciudadanos argentinosA newly posted offer advertises Argentine lead data combining national ID numbers (DNI) with email addresses. DNI is a core national identifier, so this dataset is highly usable for identity theft, phishing and account takeover against Argentine residents and services. Defenders should monitor for credential abuse and warn affected individuals.