BRIEFLeakhighP50
Leak of 2,500 infostealer logs from Mexico (Windows 10 Enterprise)
Detected8 October 2026 · 12:07 UTC
A free dump of roughly 2,500 infostealer logs harvested from machines in Mexico running Windows 10 Enterprise was posted today. Such logs typically contain browser-saved credentials, cookies and live session tokens that enable account takeover and initial network access. For LATAM defenders this is a fresh, region-specific exposure that warrants credential resets and compromise hunting.
CategoryLeak
Severityhigh
Priority score50
Detected8 October 2026 · 12:07 UTC
Leak● 52
Datos de clientes de Fidelity y Synchrony a la venta (fullz + CC)An actor is selling a 'dual ingest' of financial data attributed to Fidelity and Synchrony, combining fullz and live credit card records from a June 2026 pull. Although US-based and a few months old, pairing identity data with live cards fuels card-not-present fraud and account takeover. Relevant to financial-sector fraud and CTI teams.Leak● 88
Base de datos de 14,7M de ciudadanos argentinos a la ventaA seller is offering a database of roughly 14.7 million Argentine citizens plus 600k additional records, posted today on DarkForums. The national scale means mass exposure of personal data, enabling identity theft, phishing and credential attacks against Argentine residents. Defenders should treat it as a fresh, high-impact national leak and watch for downstream fraud.Leak● 43
Base de datos de PayPal con 14 millones de registros a la ventaSeller Marx is listing a database attributed to PayPal with over 14 million records on DarkForums, dated 4 October 2026. PayPal is a very high-value target, but such posts often recycle old data, so authenticity is unconfirmed. It still warrants monitoring for financial fraud and credential re-use.Leak● 47
Filtración de la base de datos de Meetic disponible para descargaA claimed Meetic dating-platform database is being offered for free download on BreachForums. Such a leak would expose credentials, emails and personal details of millions of dating users in Europe. Defenders should validate scope and watch for credential stuffing and re-use.Leak● 62
Base de datos de MedGulf (Bahréin) con 490.000 registros a la ventaAn actor on DarkForums (Marx) is selling a database tied to medgulf.com.bh with over 490,000 records, posted on 4 October 2026. MedGulf is a health insurer operating in the Gulf, so the leak likely exposes personal and medical data of policyholders. Healthcare and insurance defenders should verify authenticity and prepare notifications.Leak● 45
Venta de 1,67 millones de credenciales URL:LOG:PASSA seller is offering a 'fresh, private, valid' dump of 1.67 million URL:LOG:PASS credentials, a format consistent with stealer or combolist output. Credential sets of this type enable credential stuffing and initial access against web portals and exposed logins. The origin and target scope are unverified, so treat it as a mass credential exposure rather than a confirmed breach.