22M-record database leak of French logistics firm Colis Privé

Colis Privé

Detected16 October 2026 · 16:56 UTC

Why it matters

A 22-million-record 2025 database attributed to French parcel carrier Colis Privé is being offered on DarkForums, covering customer names, addresses, phone numbers and order details. Posted minutes ago, it fuels phishing, parcel-scam SMS and identity fraud against French consumers. Brand-protection and fraud teams should watch for abuse of the leaked customer set.

MetadataRECORD

CategoryLeak

Severityhigh

Priority score62

Detected16 October 2026 · 16:56 UTC

Related items6

Leak● 38

Venta de datos PII de Estados UnidosA freshly posted thread advertises PII data for the United States, but the description is vague and gives no named victim or record count. Without a confirmed source or scale it is hard to assess impact, and it may be a sample or reseller listing. It is worth a low-priority watch in case the seller later discloses a named organization or a large volume.

24m

Leak● 42

Venta de datos personales de 87.000 clientes de SamsungA forum user is offering roughly 87,000 records of personal data allegedly belonging to Samsung customers. If genuine, the set enables targeted phishing and impersonation against affected customers and could be used to abuse account-recovery flows. The scale is moderate, but the Samsung brand makes it a credible lure for fraud, so verification of authenticity is the immediate step.

24m

Leak● 54

Base de datos de empresa indonesia con ingresos de +$40M a la ventaA seller is offering a database tied to a company described as generating over $40M in revenue, suggesting a sizeable corporate data set is on the market. Corporate databases of this kind usually contain customer, employee and financial records that enable fraud, invoice manipulation and targeted phishing against partners. Buyers gaining this data can pivot into the firm's supply chain, so watching for resale is worthwhile even outside the region.

24m

Leak● 66

Filtración de base de datos de 399GB de Sociedad LatinaA 399GB database attributed to 'Sociedad Latina' is circulating, a volume that points to a very large collection of personal and possibly financial records tied to a Latin America-linked entity. Leaks of this size typically expose many individuals to identity theft and credential abuse, and often fuel downstream fraud and phishing. Regional defenders should confirm whether their organization's data is contained and prepare notification and monitoring.

24m

Leak● 74

Filtración de 9,22M de datos de la Autoridad de Población e Inmigración de IsraelA dataset of roughly 9.22 million records attributed to Israel's Population and Immigration Authority is being offered, covering a national population registry. Such data typically includes names, national IDs, dates of birth and addresses, enabling identity theft, impersonation and targeted social engineering at national scale. It matters as a benchmark for how entire civil registries get traded and as a warning for any agency holding comparable citizen data.

24m

Leak● 52

Base de datos de la estadounidense Fluke atribuida a ShinyHuntersA database from Fluke, an industrial electrical test-and-measurement manufacturer, is being advertised under ShinyHunters' name. The victim is recovered only from a login-walled thread with no date, so freshness is unconfirmed. Given Fluke's role in industrial and critical sectors, treat it as a plausible supplier-risk exposure and verify independently.