BRIEFLeakhighP78
Hostinger Colombia full leak: 4.4M records
Hostinger Colombia
Detected7 October 2026 · 02:07 UTC
A full dump of Hostinger's Colombian operation is circulating with ~4.4M records, ~58K ID photos and data tied to 61 domains. The national ID photos sharply raise identity-theft, phishing and account-takeover risk for Colombian customers. Defenders should treat leaked credentials as compromised and watch for fraud and credential stuffing.
CategoryLeak
Severityhigh
Priority score78
Detected7 October 2026 · 02:07 UTC
Leak● 30
Base de datos de Qantas Airways publicada en DarkForumsA database attributed to Qantas Airways was posted on DarkForums in February 2026, exposing airline customer data. The post is months old, so it is not a fresh alert, but it still supports credential-stuffing and phishing campaigns against travellers. Confirm scope and watch for reuse.Leak● 60
Base de datos de Ledger a la venta (2026)A BreachForums seller claims to be selling a Ledger database dated 2026, likely customer contact and order data. Ledger users are high-value targets for phishing and crypto-wallet theft, so any real dump feeds targeted scams. Verify authenticity and warn customers before treating it as confirmed.Leak● 45
Volcado privado de 120 millones de credenciales URL:login:contraseñaA seller is offering a private dump advertised as 120 million URL:login:password (ULP) credentials, posted only minutes before collection. Stealer-log datasets of this size fuel credential stuffing, account takeover and initial access across many sectors. It is not tied to a specific named victim, so priority is lower, but the scale warrants monitoring.Leak● 70
Filtración de la base de datos de clientes de CTT (Correos de Portugal)A customer database belonging to CTT, Portugal's national postal operator, is listed on DarkForums as a 2026 leak. Postal services hold millions of names, addresses, phone numbers and often payment and tracking data, and CTT is core national infrastructure. A fresh dump exposes citizens to phishing and parcel-fraud scams and can enable account takeover of CTT services.Leak● 42
Base de datos de contactos B2B de Salesforce / Data.com (231K registros) a la ventaA 231K+ record B2B leads database attributed to Data.com/Salesforce is offered for sale. It contains business contact and firmographic data useful for targeted phishing and account takeover. Direct impact is lower, but it is valuable for social-engineering campaigns against enterprises.Leak● 46
Base de datos de usuarios de Nexus Mods filtrada y compartidaAttackers are circulating a leaked database tied to Nexus Mods, a popular game-modding platform with millions of accounts, in a post dated October 6. Emails and credentials from the dump feed credential-stuffing against other services. Though not government or LATAM, the scale and recency warrant monitoring for password reuse.