BRIEFLeaklowP34
Coinbase data for 18,000 users shared on hacking forum
Coinbase
Detected13 October 2026 · 23:53 UTC
Roughly 18,000 records allegedly tied to Coinbase are being shared on DarkForums as a leaked archive. The volume is small relative to major breach dumps, but the crypto-exchange context raises credential-stuffing and account-takeover risk for affected users. Marginal priority; worth noting only for user-protection monitoring.
CategoryLeak
Severitylow
Priority score34
Detected13 October 2026 · 23:53 UTC
Leak● 88
Filtración de 636.000 registros de sitios web argentinosA database of 636,000+ records allegedly aggregated from multiple Argentinian websites is being shared on DarkForums, dated 2026. Its scale and multi-source nature suggest credentials and personal data affecting local users and possibly public-sector portals, making it the most relevant item in this batch. Argentinian defenders should treat it as a fresh leak, correlate against their user bases and force credential resets.Leak● 57
Base de datos de la plataforma de reservas rolzo.com filtradaA fresh database belonging to rolzo.com, described as a premium booking platform, was posted on DarkForums by seller 'hundov' minutes ago. It likely contains customer accounts, emails and booking/PII data of the platform's users. If any of those credentials are reused, they expand the attack surface for account takeover and downstream fraud.Leak● 44
Filtración del código fuente privado de McDonald'sA threat actor is sharing what they claim is McDonald's private source code on a leak forum. Proprietary code can reveal internal logic, vulnerabilities and potentially embedded secrets or credentials, aiding follow-on attacks. The company should assess whether any keys or credentials were exposed.Leak● 45
Base de datos de lindyproperty.com (EE. UU.) a la ventaA seller on Spear Forums is offering a 92,000-record database of the US real estate firm lindyproperty.com. Although the victim is outside Latin America, it is a real organization's customer/lead data going to market, useful for tracking broker activity and cross-referenced B2B phishing. Lower priority for AR-LATAM defenders but worth noting for regional brokers using the same data pipelines.Leak● 52
Filtración de la base de datos de Salesfloor.netA full database dump of Salesfloor.net, a US retail workforce platform, has been published on a leak forum. This exposes customer and employee data of a real company, enabling phishing and credential abuse against its users. Defenders should monitor for reuse of leaked identities in account-takeover attempts.Leak● 72
Filtración de base de datos de colaborador de Iberdrola (zirconite.es)A 153,000-row database of zirconite.es, advertised as an official collaborator of Iberdrola — Spain's largest energy utility — is being shared on Spear Forums. The set exposes usernames, emails and likely client/contract records of a supplier to critical energy infrastructure. Treat this as supply-chain risk that could feed phishing or credential attacks against the Iberdrola ecosystem.