BRIEFLeaklowP35
Full Oriflame leak including country verification documents
Oriflame
Detected26 October 2026 · 08:41 UTC
A long-running xReactor thread offers a full Oriflame leak that reportedly includes identity and verification documents from multiple countries. Such KYC material is highly sensitive and supports identity fraud and account takeover against the company and its distributors. It is flagged low because the thread is old and the data is not a fresh alert.
CategoryLeak
Severitylow
Priority score35
Detected26 October 2026 · 08:41 UTC
Leak● 52
Base de datos de estudiantes y padres de Lahore Grammar School a la ventaA threat actor on BreachForums published a database reportedly containing student and parent records from Pakistan's Lahore Grammar School flagship and elite campuses. The exposed PII of minors and their families enables targeted phishing, impersonation, and extortion against parents. Schools are low-defense targets, so this matters for anyone assessing regional data breaches.Leak● 65
Base de datos PII de cosmotienda (México) publicada en BlackBonesA full PII database of Mexican customers tied to cosmotienda, dated 2026, was published freely on the BlackBones carding forum. The dump exposes personal data of Mexican users, enabling identity theft, phishing and account takeover against local consumers. It matters because it is a fresh, openly distributed LATAM consumer PII leak that raises fraud risk across the region.Leak● 42
Filtración de la base de datos de tarjetas de racionamiento de IrakThe database of Iraq's national ration card (PDS) system was posted on BreachForums by the user Herkan0, potentially exposing household and national ID data tied to millions of citizens. The post dates to January 2026, so it is not a fresh incident, but it remains a large government PII exposure. Defenders should note it for downstream identity fraud and impersonation risk against the covered population.Leak● 45
Base de datos de la Agencia Nacional de Empleo de Camboya expuestaA database attributed to Cambodia's National Employment Agency (nea.gov.kh) was advertised on a cybercrime forum, indicating possible exposure of government employment records. Details sit behind a login wall, so the exact scale and freshness are unconfirmed, but it concerns data managed by a state agency. Any confirmed release of citizen and labor-market records raises identity-theft and targeted-phishing risks for the agency and jobseekers.Leak● 40
Base de 88 millones de registros de EE. UU. ofrecida en foroA long-running xReactor thread offers an '88 Million USA Database Full Info', a bulk identity dataset with personal records. Files of this size enable large-scale identity fraud and account takeover for US individuals and firms. The post carries no clear date and the thread is aged, so its recency must be confirmed before treating it as fresh.Leak● 55
Brecha de datos de Apollo.io (2026)xReactor threads discuss a 2026 data breach at Apollo.io, a B2B contact and sales-intelligence platform holding business and personal contact records at scale. Leaked contact data fuels phishing and account-takeover attempts against downstream customers and prospects. Organizations whose records sit in Apollo.io should treat those contacts as exposed and warn staff.