BRIEFLeaklowP40
Coinbase app user and order data leaked online
Coinbase (unverified app)
Detected6 November 2026 · 11:43 UTC
A DarkForums thread claims data from a Coinbase-branded app covering about 7.5 million orders and 1.8 million users. The content is login-walled, so scope and authenticity are unverified, but the claimed volume is significant. Analysts should confirm whether genuine Coinbase customer data is involved before escalating.
CategoryLeak
Severitylow
Priority score40
Detected6 November 2026 · 11:43 UTC
LeakPriority 46
Filtración de 82 millones de direcciones de Yuantong ExpressA dataset of roughly 82 million address records belonging to Chinese courier YTO Express (yto.net.cn) was posted on DarkForums by user cfqsdscqsdcqsc. Such logistics data typically includes names, phones and delivery addresses, enabling targeted phishing and fraud. It signals a large supply-chain exposure relevant to e-commerce and parcel-security teams.LeakPriority 72
Filtración de base de datos de Serasa Experian (Brasil)A Serasa Experian Brazil database was republished with a working download link on DarkForums by user Isssuber. As one of Brazil's main credit bureaus, the leaked records are prime material for identity theft, loan fraud and phishing. Defenders should confirm whether current consumer data is included and monitor for abuse.
LeakPriority 84
Base de datos de comercios y pagos de IZIPAY Perú (3,64M registros) en ventaA seller on DarkForums is advertising a 3.64M-record database attributed to Izipay, a Peruvian payment processor used by merchants nationwide. The dump reportedly contains merchant and payment data, exposing business contacts and transaction metadata. It matters because it enables invoice fraud, phishing against merchants and downstream attacks on Peru's card-payment chain.LeakPriority 36
Filtración de datos de Mercedes-Benz TurquíaA DarkForums user ('doommageddon') posted a document set titled 'Mercedez-Benz Turkey Data Leak' on 25 May 2026. The post is roughly five months old, so it is not a fresh alert, and the sample shows documents rather than a validated full database. It matters mainly as background for automotive-sector supplier and customer exposure, not as an immediate regional incident.LeakPriority 70
Venta de documento interno de SpaceX sobre la constelación StarshieldA seller on BreachForums (also mirrored on DarkForums) is offering an internal SpaceX document described as the Starshield constellation technical baseline and architecture. Starshield is SpaceX's government and defence satellite line, so the material is likely sensitive for military space programmes rather than a routine corporate leak. Defence and space-sector defenders should treat the document as compromised and review whether related programme data was exposed.LeakPriority 46
Filtración de datos de 140.000 usuarios de TourPay.appA BreachForums thread advertises a data breach affecting roughly 140,000 users of the travel payment service TourPay.app. The dataset reportedly covers customer accounts, which are valuable for payment fraud and credential stuffing against travel-sector partners. The post shows a multi-page thread with no clear recent date, so it should be triaged as relevant but not a fresh alert.