BRIEFLeaklowP30
Combolist of 127,400 Brazilian user credentials
Detected29 October 2026 · 09:24 UTC
A 127,400-line Brazilian email:password combolist labelled as fresh and private was posted on xReactor on 28 October 2026. It is a commodity credential set with no named victim organisation, but its size and country focus make it directly usable for account-takeover and phishing campaigns against Brazilian users and services.
CategoryLeak
Severitylow
Priority score30
Detected29 October 2026 · 09:24 UTC
Leak● 36
Filtración de base de datos del NHS británico con 31.000 registrosA DarkForums user ('Mylvunar') posted on 15 Oct 2026 a database allegedly from the UK National Health Service containing about 31,000 records. Health data is among the most sensitive categories and, even at modest scale, can fuel identity fraud and targeted scams against patients. As critical health infrastructure, any NHS exposure warrants verification.Leak● 44
Venta de 107 millones de datos de 20+ agencias de viajes iraníesA DarkForums seller is offering 107 million-plus personal records aggregated from more than 20 Iranian travel agencies. Travel data typically includes passport, identity and booking details that are valuable for identity theft, fraud and targeted phishing. The multi-company aggregation suggests a coordinated collection and should be tracked for downstream abuse.Leak● 45
Filtración de datos de clientes de Getir y BiTaksi afecta a 200.000A DarkForums user ('Korvpokil') posted a fresh dump of roughly 200,000 customer records allegedly from Getir and BiTaksi, popular Turkish delivery and ride-hailing apps. The dataset includes customer identities and contact details that enable phishing and account takeover. It is a moderate-size but current leak affecting widely used consumer platforms.Leak● 46
Venta de 160 millones de datos de más de 20 aseguradoras iraníesA DarkForums seller is advertising 160 million-plus personal records drawn from more than 20 Iranian insurance companies. Insurance datasets carry highly sensitive identity, health and financial information, making them prime fuel for fraud and targeted phishing. The aggregation across multiple firms points to a coordinated collection rather than a single breach and warrants monitoring.Leak● 48
Venta de 194 millones de registros de la app iraní TAPSIA seller on DarkForums is offering 194 million-plus unique records allegedly from TAPSI, an Iranian Uber-like ride-hailing company. Data of this scale typically includes names, phone numbers and trip or location histories, exposing millions of users to fraud and doxxing. Though not in Latin America, it is among the largest regional datasets circulating and signals a major breach at a mobility platform.Leak● 52
Base de datos de 11 millones de la japonesa StarX.co.jp a la ventaA DarkForums user ('SpartanX') posted an 11-million-record database attributed to StarX.co.jp, a Japanese company, on 29 Oct 2026. If legitimate, the dump exposes customer identities and account details at scale, enabling phishing and account takeover. Freshly listed and sizeable, it should be tracked for credential reuse against Japanese services.