BRIEFLeaklowP18
Poshmark 11 million user credentials leak
Poshmark
Detected21 October 2026 · 00:39 UTC
A thread advertises an 11 million-record Poshmark email:password combolist. Poshmark suffered a widely reported breach exposing millions of accounts, so this matches an older, resold dataset rather than new access. Low urgency, but it confirms ongoing trafficking of its users' credentials for account takeover.
CategoryLeak
Severitylow
Priority score18
Detected21 October 2026 · 00:39 UTC
Leak● 74
Base de datos de afiliados a EPS de Colombia a la ventaA threat actor is advertising a database containing enrollee records from Colombia's EPS public health-insurance system, which aggregates affiliation and personal data for millions of citizens. Such datasets expose national ID numbers, contact details and health-coverage status, enabling identity theft, social-engineering and targeted fraud against patients. Health-sector data in Latin America is critical infrastructure-adjacent, so defenders should validate the claim and monitor for downstream credential-stuffing against EPS portals.Leak● 25
Base de datos de clientes de Under Armour a la ventaDarkForums lists a customer database for underarmour.com in its 'Databases' section. Under Armour disclosed a 2018 breach of roughly 150M accounts, so this is almost certainly a repackaged or resold copy rather than a fresh intrusion. Only mildly useful as a reminder of credential-stuffing and phishing exposure for its user base.Leak● 50
Base de datos de Jaguar Land Rover filtrada en un foroA BreachForums thread advertises a leaked Jaguar Land Rover database available for download. The automotive manufacturer has suffered significant prior intrusions, so this may be a repost of older data rather than a fresh breach, which lowers urgency. Still, it is a named high-profile enterprise dataset worth verifying for freshness and downstream credential/PII exposure.Leak● 57
Filtración de datos de DoorDash publicada en un foroA thread dated 19 October 2026 offers a DoorDash data set for download on DarkForums. DoorDash is a large food-delivery platform, so any leaked customer, courier or merchant data carries fraud and account-takeover risk. Although it is not a LATAM or government target, a fresh large-org leak is worth tracking for downstream credential and PII abuse.Leak● 80
Filtración de base de datos de la aseguradora ARS Meta Salud (Rep. Dominicana)A full database belonging to ARS Meta Salud, a Dominican Republic health insurer, has just been posted for download on DarkForums. Health insurers hold sensitive patient and policyholder PII (names, IDs, coverage, contact data), making this a high-value leak for fraud and phishing. Defenders in the LATAM health sector should treat this as a fresh, region-relevant exposure and monitor for credential stuffing and social engineering against members.Leak● 42
Filtración de base de datos del cartório brasileño 1cartoriosbc.com.brA threat actor posted a username:password database attributed to 1cartoriosbc.com.br, a Brazilian notary (cartório) web service, in a public leak forum. Notary offices hold identity, property and contract records, so even a site-level credential dump can feed account takeover against staff and downstream fraud. It is fresh and regionally relevant, though scale and record sensitivity are not yet confirmed.