BRIEFLeaklowP30
52,179 Chilean credentials combolist posted on forum
Detected10 October 2026 · 14:21 UTC
A freshly posted combolist contains roughly 52,179 email/password pairs attributed to Chile. The volume is modest, but the set can fuel credential-stuffing and account-takeover against Chilean online services and public portals. Defenders should screen for password reuse and force resets on affected accounts.
CategoryLeak
Severitylow
Priority score30
Detected10 October 2026 · 14:21 UTC
Leak● 38
Base de datos de consumidores de EE. UU. con 106.000 registros a la ventaA 106,000-record US consumer database is being shared on the xReactor forum, exposing personal and likely contact data of US individuals. The volume is modest and the target is outside Latin America, so regional impact is limited. No date is visible, suggesting this is a repost rather than a fresh event.Leak● 46
Filtración de datos de 555.000 propietarios de viviendas de FranciaA 555,000-record dataset described as French homeowner data is being traded on RaidForums, likely containing names, addresses and contact details. It is a sizable PII leak useful for phishing and identity fraud, though the victim base is outside Latin America. No clear post date is shown, so recency is unverified.Leak● 56
Filtración de base de datos de la firma neozelandesa Tas NZ BayA 365GB database attributed to New Zealand firm Tas NZ Bay Limited (tasnz.co.nz) is being offered on RaidForums, implying a very large exfiltration. Even outside Latin America, a leak of this scale exposes customer PII and internal records usable for fraud and follow-on intrusions. No post date is visible, so age and current validity cannot be confirmed.Leak● 66
Venta de base de datos de la plataforma educativa española Fiction Express (725 GB)A seller is offering a 725 GB database allegedly belonging to Fiction Express, a Spanish digital reading and education platform used by schools. Such a volume could expose student, parent and teacher accounts plus internal data across many institutions. Education-sector defenders in Spain should watch for credential reuse, phishing against schools, and account-takeover attempts.Leak● 48
Base de datos de Standard Gas con 4M de registros a la ventaA threat actor is selling a database of about 4 million records attributed to Standard Gas. The data fields are unverified, but if it holds customer or operational information it enables targeted phishing and fraud. Any energy-sector victim also raises the possibility of critical-infrastructure exposure.Leak● 55
Divulgación de brecha de datos de Pathao LimitedAn actor is publishing an ongoing breach disclosure against Pathao, a major Bangladeshi ride-hailing, delivery and payments platform. The continuing nature suggests active access and further exfiltration, affecting a large base of users and drivers. Exposed PII and payment data could drive fraud and account takeover.