BRIEFLeaklowP44
16 million credentials leaked in stealer logs
Detected10 October 2026 · 08:21 UTC
A 16-million-line URL:login:password stealer-log dump is posted for free, aggregating credentials harvested by infostealers. Although no single organization is named, the scale makes credential-stuffing and account takeover against any exposed user highly likely. Defenders should search for their domains and force resets of affected sessions.
CategoryLeak
Severitylow
Priority score44
Detected10 October 2026 · 08:21 UTC
Leak● 63
Filtración de logs del sistema HRMS del Metro de NoidaA threat actor posted logs from the HRMS (Human Resource Management System) of the Noida Metro Rail Corporation, a critical urban transport operator. Exposure of HR/identity records and internal system logs enables credential reuse, phishing and lateral movement against a government-owned infrastructure entity. The post is fresh (minutes old), so defenders should treat it as an active alert and rotate any implicated credentials.Leak● 85
Filtración de base de datos del banco mexicano BanorteA Banorte database is being distributed for free on BreachForums with a direct download link. Banorte is one of Mexico's largest banks, so exposed customer records create serious fraud, identity-theft and follow-on account-takeover risk. LatAm financial defenders should treat any credentials and PII in this dump as compromised.Leak● 50
Filtración de 16 millones de credenciales de Secretline.topA free dump labelled Secretline.top claims over 16 million URL:login:password credential lines, a classic stealer/credential-log set. While such mass dumps are often recycled, exposed combinations fuel credential stuffing against corporate webmail, portals and cloud services.Leak● 58
Filtración de 5,6 millones de logs de stealer de LupinA VIP-section dump released on 2026-10-10 contains over 5.6 million worldwide stealer-log lines harvested by infostealer malware. These credential-and-session records let attackers pivot into corporate VPNs, email and SaaS accounts, so defenders should treat exposed credentials as compromised.Leak● 63
Filtración de base de datos de e-topplus.kr: 28 millones de registrosA full database dump of the Korean site e-topplus.kr is being published, containing roughly 28 million lines of PII such as full name, date of birth, address and phone. This volume of identity data enables large-scale fraud, phishing and account takeover across a whole user base.Leak● 72
Filtración de 15 TB de documentos clasificados del INSS israelíA forum actor claims to have leaked 15 TB of classified documents tied to Israel's INSS national security body, likely the Israeli National Insurance Institute. Even if only partly genuine, data of this scale from a state security agency can fuel espionage, targeting and disinformation against government systems.