BRIEFLeakhighP72
U.S. Department of Commerce data for sale
U.S. Department of Commerce
Detected13 October 2026 · 05:54 UTC
A seller is offering a dataset tied to the U.S. Department of Commerce in a darkweb leaks market, an unusually high-value government target. Compromise of federal-agency data can expose internal contacts and systems. Defenders should watch for downstream phishing and impersonation.
CategoryLeak
Severityhigh
Priority score72
Detected13 October 2026 · 05:54 UTC
Leak● 44
Brecha de datos en la empresa Mohammed Hadi Al-RasheedA threat actor posted a data breach claim against Mohammed Hadi Al-Rasheed Co on RaidForums/BreachForums today (13 Oct 2026), offering stolen records for distribution. The exact record count is unconfirmed, but a freshly published corporate database dump of this kind can enable fraud, credential stuffing and follow-on intrusion. It matters mainly as a timely leak to monitor, though the victim is outside the AR-LATAM focus.Leak● 44
Base de datos de Doublecounter.gg filtradaThe database of Doublecounter.gg, a Discord anti-fraud and verification service, has been posted for download. Exposed user and session data can undermine platform trust and enable account abuse. Mid-impact but relevant for fraud-adjacent defenders.Leak● 46
Base de 10 millones de propietarios de autos franceses a la ventaA 10-million-record database of French car owners is offered for sale, exposing names, addresses and vehicle data. It enables targeted fraud and impersonation in France. Non-LATAM, but a large European PII leak worth flagging.Leak● 48
Información de facturación de 6 millones de registros a la ventaA seller lists a 6-million-record billing/customer dataset for sale, exposing payment and personal billing details. Such data enables payment fraud and targeted phishing. Fraud teams should treat it as commodity but actionable PII.Leak● 52
Filtración de 26,2 millones de líneas de credenciales (12-OCT-2026)A dump of roughly 26.2 million credential/stealer-log lines, dated 12 Oct 2026, was released free in 10 parts. Fresh credential material drives credential-stuffing and account takeover across many services. Defenders should detect reuse of leaked credentials and enforce MFA.Leak● 58
Base de 134 millones de propietarios de viviendas en EE.UU. a la venta134 million U.S. home-owner records are advertised for sale, exposing names, addresses and property/loan details. This mass PII fuels mortgage fraud, impersonation and real-estate scams. It is not a single-org breach but a broad fraud and privacy risk.