BRIEFLeakhighP40
Fresh URL:login:password dump of 13.5M credentials shared
Detected21 September 2026 · 10:37 UTC
A dump advertised as 13.5M URL:login:password records is circulating through the 'vulta.pw' shop, a large fresh credential corpus that can fuel credential stuffing and account takeover. Aggregated logs of this size frequently include government and corporate email access. Defenders should assume their users' credentials are exposed and enforce resets and MFA.
CategoryLeak
Severityhigh
Priority score40
Detected21 September 2026 · 10:37 UTC
Leak● 45
Datos de licencias de conducir de Carolina del Norte publicadosA DarkForums thread dated 5 November 2026 advertises a dataset of North Carolina driver's license records. State DMV data contains identity attributes used for loan fraud, account opening and identity theft against residents. US state agencies and identity-verification providers should scope the dataset and warn the public.Leak● 44
Datos de ciudadanía pakistaní y de Binance publicados para descargaA DarkForums post from 5 November 2026 offers a free download combining Pakistani national citizenship data with Binance-related records. Identity data of this kind supports SIM-swap, KYC bypass and account takeover against exchange users. Pakistani authorities and crypto exchanges should assess the dataset and warn affected citizens.Leak● 48
Base de datos del partido AKP de Turquía publicada en un foroOn 5 November 2026 a DarkForums user published a database attributed to Turkey's ruling AK Party. Political party datasets hold member lists, volunteer contacts and staff details that are highly valuable for influence operations and targeted phishing. Turkish political organisations and public institutions should confirm the breach and harden staff accounts.Leak● 52
Filtración de la base de datos del gimnasio francés FitnessParkA DarkForums user posted on 5 November 2026 a database labelled FitnessPark with over five million records, referring to the French fitness chain. Member databases of this size expose names, contact details and subscription data that fuel phishing and credential stuffing. French consumer-facing companies should verify the dataset and notify affected customers.Leak● 50
Datos del portal gubernamental iraní ito.gov.ir filtradosA DarkForums post from 5 November 2026 advertises leaked data from ito.gov.ir, an Iranian government website on the national .gov.ir domain. Government portal data usually includes staff accounts and internal contact records that enable credential reuse and phishing against public entities. Iranian administrators should confirm the scope of the exposure and reset affected accounts.Leak● 55
Base de datos del Observatorio Parlamentario de Irak a la ventaOn 5 November 2026 a DarkForums user posted a database attributed to the Iraq Parliamentary Observatory, a government-linked legislative monitoring body. Parliamentary datasets typically contain official contacts, staff details and internal documents useful for targeted phishing against public officials. Iraqi government institutions should confirm the breach and warn staff about spear-phishing.