BRIEFLeaklowP42
Double Counter database leak exposes 275,000 records
Double Counter
Detected12 October 2026 · 10:54 UTC
A forum post advertises a 2026 leak of the Double Counter database containing roughly 275,000 records of Discord usernames and emails. Double Counter is a Discord verification service, so the data may tie accounts to email addresses used across many communities. It is a mid-size credential and PII exposure useful for targeted phishing, though limited in sectoral impact.
CategoryLeak
Severitylow
Priority score42
Detected12 October 2026 · 10:54 UTC
Leak● 55
Base de datos de clientes de iFood Brasil a la ventaA DarkForums seller is offering an iFood Brazil customer database for sale. iFood is one of Latin America's largest food-delivery platforms, so stolen records enable phishing, account takeover and consumer fraud. Regional fraud-defense and anti-abuse teams should watch for credential-stuffing and identity-theft campaigns.Leak● 52
Base de datos de la fintech bangladesí Pathao publicada en un foroA threat actor published a database allegedly tied to Pathao, a major Bangladeshi ride-hailing and digital-payments firm, on a hacking forum. The dump's exact volume and fields are unverified, but such data typically includes user accounts and contact details. If authentic, it could fuel credential stuffing, fraud and account takeover across Pathao's large regional user base.Leak● 60
A la venta base de datos de 1.200 millones de registros atribuida a AT&TA freshly posted thread offers a database labeled as 1.2 billion records belonging to AT&T, the major US telecommunications carrier. The scale and telecom nature make it a high-value trove for SIM-swap, phishing and account-takeover campaigns if the data is genuine. Note that similar AT&T datasets have circulated before, so the dump may be recycled rather than new.Leak● 45
Venta de expedientes VIP de clientes de Pathao (Bangladesh)A seller advertises 'Pathao VIP Dossiers' with proof of access, referring to the major South Asian ride-hailing and fintech platform. This points to a real breach of passenger or customer records rather than marketing noise. It matters for fintech fraud and identity-theft monitoring across the region.Leak● 68
Base de datos de 88 millones de registros de EE. UU. a la ventaA forum user posted today a 'full info' database of 88 million US records in the premium section. The scale and same-day recency point to a fresh, monetizable dump rather than recycled data. US defenders should check whether their user or customer data is included and monitor for resale.Leak● 28
Filtración de base de datos del servicio Double CounterA fresh database leak titled 'Double Counter leak' was posted on DarkForums by a staff account, targeting the Double Counter Discord verification bot. Details of scale and data fields are not yet visible, and the affected service is not government or critical infrastructure. It is worth only peripheral tracking for Discord-community exposure.