BRIEFLeakhighP64
Leak of 36 million Evite user records
Evite
Detected20 October 2026 · 14:39 UTC
A 36 million record dataset attributed to Evite, a US online invitations service, is being offered for sale in a recently posted thread. Such dumps typically include emails, names and account metadata that fuel phishing, credential stuffing and spam campaigns. Large fresh consumer datasets are high-value for downstream account-takeover chains.
CategoryLeak
Severityhigh
Priority score64
Detected20 October 2026 · 14:39 UTC
Leak● 48
Copia de seguridad SQL de un sitio web de Panamá a la ventaA forum listing advertises a SQL backup taken from a Panama-based website, potentially exposing user accounts, contact data and administrative records. If the site belongs to a public or regulated entity, the impact extends to citizens and downstream services in the region. The organization is not clearly identified and the date is unknown, so this needs validation before escalation.Leak● 58
Filtración de base de datos de 22 millones de usuarios de YouNowA full-platform export of YouNow with 22 million user records is being offered for download, likely including emails, usernames and profile data. Leaks of this size enable credential stuffing against other services and targeted harassment or phishing of users. The listing date is unclear, so verify recency before treating it as a new incident.Leak● 60
Base de datos del minorista ruso Wildberries a la ventaA seller is advertising a 2026 database from Wildberries, Russia's largest online retailer, which would contain vast customer, order and contact data. Retail datasets of this size fuel credential stuffing, phishing and parcel/order fraud across a large user base. The post is fresh, so it should be tracked for sample verification and downstream reuse.Leak● 60
Base de datos de inversores de Vanguard Group a la ventaA seller claims to hold a database of The Vanguard Group, the US asset-management giant, covering mutual-fund, ETF and stock investors. Financial investor data is high-value for targeted phishing, account takeover and identity fraud, and can be cross-referenced against brokerage accounts. The listing is minutes old, so validation and customer-notification work should start now.Leak● 62
Base de datos del banco HSBC con 175.000 registros filtradaA 175,000-record database attributed to HSBC is being distributed free, likely containing customer or account data. Even a partial banking dataset exposes individuals to phishing, account takeover and social-engineering fraud, and pressures the institution's fraud teams. The date is unclear, so treat as unverified but worth monitoring for credential and PII reuse.Leak● 70
Base de datos de 16 millones de registros de Punjab Land Records a la ventaA seller is offering a 16-million-record dataset allegedly taken from the Punjab Land Records Authority, a government body holding land-ownership and citizen identity data. Records of this scale enable mass identity theft, targeted impersonation and fraud against citizens, plus downstream attacks on linked services. The post is only hours old, giving defenders a short window to warn affected parties and monitor for reuse of the data.