BRIEFLeakhighP45
IKEA customer data offered for sale at low price
IKEA
Detected13 September 2026 · 10:12 UTC
A threat actor is selling personal information of IKEA customers at a low price on a leak forum. IKEA is a global retailer with large customer bases, so even a partial database enables phishing, account takeover and fraud against consumers. The offer appears current but its scale and authenticity are unverified.
CategoryLeak
Severityhigh
Priority score45
Detected13 September 2026 · 10:12 UTC
Leak● 34
Filtración de registros Salesforce con datos personales de Infinite CampusA moderator post on the Spear leak forum advertises Salesforce records from Infinite Campus, a US K-12 student information system provider, containing PII. The thread is dated 30 March 2026, so it is roughly seven months old and already widely circulated. It matters mainly to US school districts whose staff and student data may be included.Leak● 74
Base de datos con más de 700.000 registros de Itaú Brasil publicada en foroA Premium Members section post by 'moonsh1ne' on DarkNetArmy advertises a database of 700,000+ records tied to Itaú, one of Brazil's largest banks, and was published today. If authentic, the set would expose customer or account data usable for fraud, credential stuffing and social engineering against bank clients. Brazilian financial institutions should assess whether the records match internal data.Leak● 28
Base de datos de la patrulla fronteriza rusa filtrada (2022)A leak of Russian border patrol records from 2022, covering individuals who crossed the Russian border including names and entry dates, was reshared on RaidForums. It is government-sensitive data but dated and outside Latin America, limiting immediate relevance. Useful as background on cross-border movement data exposure, not as a fresh alert.Leak● 32
Directorio de empleados de U.S. Bank de 2023 filtradoA BreachForums thread offers a file named as a U.S. Bank employee directory dated May 2023, with 114,076 lines. It is an old internal directory rather than customer accounts, but it still enables targeted phishing and org-chart mapping against the bank. The data is stale and has circulated for years, so it is not a fresh alert.Leak● 47
Base de datos de 11 millones de registros de la japonesa StarXAn 11-million-record database attributed to Japanese firm StarX Co. was offered on the pwnfrm dark-web forum. The scale indicates a substantial customer or user dataset valuable for credential stuffing, phishing and fraud. Although outside Latin America, the volume merits monitoring for regional spillover and downstream abuse.Leak● 78
Base de datos de Serasa Experian de Brasil filtrada para descargaA download of the Serasa Experian database was advertised on a dark-web forum; Serasa is Brazil's largest credit bureau, holding financial and identity data on millions of citizens. Such a leak enables identity theft, loan fraud and account takeover against Brazilian consumers and businesses. The scope is unverified but the target is high-value critical financial infrastructure.