BRIEFLeaklowP35
Leak of 212 orders with DNI and addresses from coincustody.io
coincustody.io
Detected24 October 2026 · 14:56 UTC
A forum user published a 212-row dataset from coincustody.io containing customer names, national ID (DNI) numbers and shipping addresses tied to 2026 orders. Volume is small, but DNI-plus-address pairs are strong identity-fraud and spear-phishing material against Spanish-speaking customers. Worth tracking for reuse of the same data in credential-stuffing or KYC-bypass operations.
CategoryLeak
Severitylow
Priority score35
Detected24 October 2026 · 14:56 UTC
Leak● 33
Filtración de 30.000 registros de clientes de Yakult JapónA forum actor posted a 30,000-record PII database attributed to yakult.co.jp, the Japanese beverage company, in a thread that was active at collection time. The volume is modest, but corporate customer PII supports phishing and business email compromise against a well-known brand. It is a useful corroboration point if Yakult-branded lures appear in regional campaigns.Leak● 50
Filtración de 130.000 datos personales de la universidad ISCU (Corea)An actor posted a 130,000-record PII database attributed to iscu.ac.kr, an academic institution in South Korea, and the thread was live at collection time. If authentic it exposes student and staff personal data usable for targeted phishing, credential stuffing and impersonation. Academic directories are frequent pivots into research and government-adjacent networks, so the sample should be validated and matched against credential exposures.Leak● 52
Filtración de 1,2 millones de líneas de La France InsoumiseA database described as containing 1.2 million lines from French political party La France Insoumise is being distributed. Member and contact data of a political party fuels targeted phishing against activists and officials. Large, recent political leaks warrant monitoring for downstream credential abuse and influence operations.Leak● 62
Filtración de 3 millones de registros del grupo francés MaevaA threat actor is leaking or selling a database attributed to Maeva Group containing roughly 3 million records. If confirmed, it exposes customer and booking data of a major European vacation-rental operator, enabling phishing and account-takeover campaigns. Defenders should verify scope and monitor for credential reuse.Leak● 68
Filtración de base de datos de la SBS Perú con 13M de clientesA 13-million-record data set tied to Peru's banking, insurance and pension superintendency (SBS) is being circulated as monthly credential combos covering 2025-2026. Although presented in combolist form rather than a full structured dump, it targets a financial-sector regulator and can fuel credential stuffing against Peruvian banking and insurance portals. Peruvian defenders should force resets for affected accounts and monitor for reuse across sector services.Leak● 45
Venta de base de datos de la aseguradora American Income LifeA seller is listing data tied to American Income Life Insurance Company (ailife.com) in a marketplace leads section, likely a scraped or breached customer/policyholder dataset. The scale and freshness are unconfirmed from the snippet, and the target is outside the LATAM region, but a named insurer dataset can fuel phishing and identity fraud against policyholders and agents. Worth tracking for confirmation rather than treating as an urgent alert.