BRIEFLeakhighP44
LUPIN combolist of 30.4 million credentials posted
Detected29 October 2026 · 06:24 UTC
A VIP-section thread on the Spear forum, dated 29 October 2026 and titled 'LUPIN ULP 30 400 000', advertises roughly 30.4 million URL:login:password entries of global origin; the body is behind a login wall. At this scale the dump will feed credential stuffing against corporate VPNs, webmail and SaaS portals, including organizations in Latin America that reuse passwords. Treat it as a hygiene and detection problem rather than a targeted breach.
CategoryLeak
Severityhigh
Priority score44
Detected29 October 2026 · 06:24 UTC
Leak● 52
Getir y BiTaksi sufren filtración de 200.000 clientesA forum user posted a fresh dump of about 200,000 customer records from Getir and BiTaksi, two Turkish delivery and ride-hailing services. The data likely includes names, phone numbers and addresses useful for fraud and smishing. The post appeared on DarkForums around 26 October 2026.Leak● 55
Filtración de base de datos de Cultura.com con 2M de registrosA DarkForums user posted a database attributed to Cultura.com, the French cultural retailer, containing roughly 2 million records. Leaked customer data of this size enables credential stuffing, phishing and account takeover against the company's users. The post dates to 16 October 2026 and appears fresh.Leak● 56
Base de datos de Genesys Cloud Services filtradaA DarkForums post advertises a database attributed to Genesys Cloud Services, a major US contact-center and cloud provider used by many enterprises and public agencies. A leak here could expose customer records and integration secrets. Date and volume are unstated, so verification is needed.Leak● 62
Base de datos de NBCUniversal a la venta en DarkForumsA DarkForums seller posted a database claimed to belong to NBCUniversal (nbcuniversal.com), the US media conglomerate. Media companies hold large volumes of employee and partner data useful for phishing and business email compromise. The exact record count and date are not shown, so authenticity should be checked.Leak● 50
Base de datos de la revista Forbes publicada en foro criminalUser Torax2020 posted on DarkForums on 29 October 2026 a thread titled 'DATABASE Forbes', advertising a dataset attributed to the US business media outlet. The post gives no size, sample or proof, so scope is unconfirmed, but media subscriber and staff databases are routinely reused for credential stuffing and targeted phishing against journalists and corporate readers. Verify the claim and watch for resale or bundling into larger combolists.Leak● 74
Filtración de datos de 15.284 pacientes de hospital dominicanoA database containing records on roughly 15,284 people from a hospital in the Dominican Republic was posted on DarkForums. The data appears linked to a health-sector entity, exposing highly sensitive, legally protected patient information. Such dumps fuel identity theft and targeted scams against patients.