BRIEFLeakhighP53
Leak of 2.8M Northern Iraq Kurdish records
Northern Iraq (Kurdish) population data
Detected23 September 2026 · 19:51 UTC
A dataset of roughly 2.8 million Northern Iraq Kurdish records, including names and addresses, is circulating on an underground forum as a 2026 fresh leak. It is population-scale PII affecting an entire region, valuable for regional and diaspora-targeting actors. Defenders in the area should treat these identities as compromised and watch for follow-on fraud.
CategoryLeak
Severityhigh
Priority score53
Detected23 September 2026 · 19:51 UTC
Leak● 46
Filtración de base de datos de Assurance Retraite (Francia)A 370,000-record database of Assurance Retraite, a French pension administration, was posted for download. It exposes retirees' personal data. The post dates to March 2026, so it is an older leak rather than a new alert.Leak● 50
Filtración de base de datos de la francesa CegedimA 300,000-record database of French healthcare-data company Cegedim was published on a leak forum. Cegedim handles sensitive medical and pharmacy data across Europe. Posted in March 2026, it is a real-org breach but not a fresh incident.Leak● 55
Filtración de base de datos de PajEmploi/URSSAF (Francia)A 689,000-record database linked to PajEmploi/urssaf.fr, a French social-security and employment body, was posted for download. It exposes personal and employment data of French citizens. The post dates to March 2026, so this is a large but stale exposure rather than a fresh alert.Leak● 45
Filtración de la base de datos Assurance-Retraite (370K)A French retirement-insurance database of roughly 370,000 records was posted on an underground forum in March 2026. It contains personal and pension-related data of individuals, exposing them to identity theft and targeted phishing by scammers posing as pension authorities. Large but stale, so context rather than a fresh alert.Leak● 48
Hackean el call center turco UlakCX y filtran datosA threat actor claims to have hacked UlakCX, a Turkish call center, and posted the data on 23 September 2026. Call centers hold large volumes of customer PII and possibly payment data, making this high-risk for downstream fraud and vishing. Fresh and time-sensitive, worth monitoring for reuse.Leak● 50
Filtración de la base de datos de urssaf.fr (689K)A 689,000-record database attributed to urssaf.fr, France's social-security contributions network, is being shared. It contains personal and employment data of insured individuals, exposing them to identity theft and social-engineering. Posted in March 2026, so not fresh, but its scale makes it a high-value PII/credential source for follow-on attacks.