BRIEFLeakhighP46
Leak of 1.8M users from Chinese massage app '按个摩'
按个摩 (Chinese massage app)
Detected2 October 2026 · 14:45 UTC
A database from the Chinese massage app '按个摩' is being offered, containing roughly 7.5 million orders and 1.8 million user records. The scale makes it a significant PII and order-data leak that could fuel fraud and phishing against affected users. Although outside Latin America, it is a sizable fresh database exposure worth tracking.
CategoryLeak
Severityhigh
Priority score46
Detected2 October 2026 · 14:45 UTC
Leak● 42
Filtración de datos del servicio anti-bot DoubleCounter.ggA breach of DoubleCounter.gg, a Discord anti-alt and verification service, was posted on 11 October 2026. The platform stores user IDs, IP addresses and verification metadata for many communities, so the leak can expose linked accounts and infrastructure details. It is niche and non-regional, but fresh and could feed downstream account and fraud attacks.Leak● 44
Base de datos de 2 millones de suscriptores móviles de Indonesia a la ventaA seller is offering a database of 2 million Indonesian mobile subscribers reportedly derived from SIM-card registration records, including identity and phone data. This is a large telecom dataset that enables SIM-swap, fraud and identity theft at national scale. It sits outside the LATAM region, so it is relevant as a sizeable national telecom leak but not a regional alert.Leak● 58
Base de datos de 40 millones de clientes de Payback Alemania a la ventaActor 'Koshyrman' is selling a 40-million-record database belonging to Payback, a major German loyalty and payments program. Such a leak exposes extensive customer PII (names, addresses, emails, phone numbers) and enables mass phishing, credential stuffing and account takeover. It is outside Latin America, but its scale and recency make it a credible large-breach sale worth tracking.Leak● 50
Datos de clientes de Binance Australia a la ventaA RaidForums seller is offering a dump of Binance Australia customer data for sale. Compromised exchange records expose account holders to targeted phishing, credential stuffing and SIM-swap fraud. Security teams at the exchange and its customers should watch for follow-on account-takeover and social-engineering campaigns.Leak● 55
Base de datos de 109.392 usuarios de Coinbase a la ventaA RaidForums seller is offering a database of 109,392 Coinbase accounts with balances attached, indicating compromised credentials of real users. Such records fuel targeted phishing, credential stuffing and account takeover against crypto holders, who face direct financial loss. Defenders should treat it as a credential-leak signal and push MFA and password resets to affected accounts.Leak● 25
Filtración de datos de la alimentaria brasileña Integra FoodsA database from the Brazilian food company Integra Foods (integrafoods.ind.br) was posted on a leaks forum. The thread is dated July 2023, so this is stale material rather than a fresh incident. It is included only for correlation, not as a new alert.