BRIEFLeakhighP52
Malaysian retailer Senheng customer database of 1.38M records leaked
Senheng.com.my
Detected12 September 2026 · 14:12 UTC
A customer database of Malaysian electronics retailer Senheng (senheng.com.my) with about 1.38 million records is offered on DarkForums. The data can fuel phishing, card fraud and account-takeover against the retailer's customers. It is a breach of a real organization, though outside the Latin American footprint.
CategoryLeak
Severityhigh
Priority score52
Detected12 September 2026 · 14:12 UTC
Leak● 30
Combolist de 8 millones de credenciales usuario-contraseña a la ventaA forum user on xReactor published a fresh combolist of roughly 8 million email:password pairs, marketed as newly checked. The dump has no single named victim, so its main value is as fuel for credential stuffing and password spraying against any organization with weak MFA. Defenders should assume some corporate accounts may appear once the file propagates and proactively force resets on any exposed mail domains.Leak● 38
Filtración de la base de datos de la armería Guns.comThe pwnfrm leak forum lists a downloadable dump attributed to Guns.com, a US firearms and outdoor retailer. Customer records from a firearms seller are elevated-risk because they tie real identities to specific purchases, aiding extortion, burglary targeting and fraud. The post is behind a login wall with no sample, date or record count, so scale and recency are unverified.Leak● 40
Colección de bases de datos de votantes de Estados UnidosA leak-aggregator thread on the pwnfrm forum offers a bundle of US voter registration databases for download. Voter files expose names, home addresses, party affiliation and phone numbers at national scale, which fuels doxxing, targeted disinformation and impersonation. The thread is login-walled with no sample, date or record count, so freshness and scope cannot be confirmed.Leak● 55
Filtración de la base de datos del portal estatal ruso GosuslugiUser DBHunter advertised on the DarkNetArmy forum a 2025 dump of gosuslugi.ru, Russia's unified government-services portal holding identity, property, benefits and family records. If authentic, this is a high-value state identity dataset ideal for impersonation, document fraud and targeted phishing. The post is roughly two months old and its authenticity and record count are unverified.
Leak● 48
Filtración de datos del gobierno de Pamekasan (go.id), IndonesiaForum member SUB-ZER0 posted on the DarkNetArmy onion forum a leak of data tied to pamekasankab.go.id, the site of Indonesia's Pamekasan Regency government, marked as posted today. Regional government records typically contain citizen identifiers and internal staff data, making this a genuine government breach rather than carding noise. Defenders should verify the scope and whether the dataset is being redistributed.Leak● 58
Filtración de 300.000 clientes de OrionTelekom (Serbia)A threat actor is offering a 300,000-customer database belonging to Serbian telecom OrionTelekom (oriontelekom.rs), including a sample for verification. Telecom subscriber data enables SIM-swap, phishing and identity fraud against customers and staff. It is a serious leak for a named critical-infrastructure operator, even though it sits outside the LATAM region.