BRIEFLeaklowP35
1M URL:LOG:PASS stealer-log credentials leaked
Detected10 September 2026 · 12:12 UTC
A stealer-log dump labeled '1M URL:LOG:PASS' is being reposted across several underground forums, containing roughly one million URL/login/password tuples harvested by infostealers. It has no single target but enables wide credential-stuffing and session-takeover campaigns. Monitor for reuse of your users' credentials inside these logs.
CategoryLeak
Severitylow
Priority score35
Detected10 September 2026 · 12:12 UTC
Leak● 32
Filtración masiva expone a 70.000 agentes de inteligencia de MarruecosNodo313 is re-circulating the JABAROOT dump, a mass leak exposing roughly 70,000 Moroccan intelligence personnel records including identities and contact data. The thread started in August 2026, so it is not a fresh alert, but the dataset is a valuable targeting list for espionage and coercion. It illustrates how exposed state-employee registries become an attack surface for other governments and threat actors.Leak● 40
Base de datos de la taiwanesa Popchill publicada en un foroAn onion forum thread announces a dumped database belonging to Popchill.com, a Taiwanese second-hand fashion marketplace, but the body is behind a login wall. No record count, sample or date is visible from the title alone. If genuine, it would expose customer PII for a regional e-commerce platform and enable account-takeover attempts.Leak● 68
Filtración de la base de datos de EscapadaRural (2,9M registros)A BreachForums thread offers a downloadable database allegedly belonging to Spain's rural-tourism platform EscapadaRural.com, with roughly 2.9 million records and a thread spanning several pages of replies. No publication date is visible, so freshness is unconfirmed, but the scale of customer PII enables phishing and credential stuffing against Spanish users and travel businesses.Leak● 92
Base de datos de SENECYT (Ecuador) publicada en BreachForumsUser 'pheisito' posted a database belonging to SENECYT, Ecuador's national secretariat for higher education, science and technology, on BreachForums on 25 October 2026. The dump targets an Ecuadorian public-sector body and likely exposes institutional, staff and student records. Fresh government data leaks in the region justify immediate verification and containment.Leak● 40
Dump de más de 500.000 credenciales de dominios .com publicadoA VIP-section release dated 24 October 2026 offers a 500K+ ULP (URL:login:password) list covering .com domains, i.e. working-style credentials for named websites rather than free-mail combos. Because the targets are unspecified sites, any .com-hosted service could see employee or customer credentials replayed in credential stuffing and account takeover attempts.Leak● 74
Base de datos de Shopify de la tienda de MrBeast a la ventaThe actor 'beastfeast' is selling a Shopify database of more than 2 million customer records from the MrBeast Store on BreachForums, posted on Saturday 24 October. Such dumps typically contain names, emails, shipping addresses and order histories, enabling phishing, credential stuffing and fraud against buyers. Any e-commerce brand running on Shopify should treat this as a live exposure and verify which of its own records appear in the dump.