BRIEFLeakhighP72
Leak of 39 million inDrive user phone numbers in India
inDrive India
Detected22 September 2026 · 01:01 UTC
Reposts collapsed2
A fresh dataset of roughly 39 million inDrive phone numbers tied to the Indian market was posted for free on a hacking forum. inDrive also operates widely across Latin America, so this PII can fuel SIM-swap, smishing and account-takeover campaigns against riders and drivers in the region. Defenders should treat it as a large, recent personal-data leak, not stale chatter.
CategoryLeak
Severityhigh
Priority score72
Detected22 September 2026 · 01:01 UTC
LeakPriority 40
Publican 16,2 millones de credenciales robadas de todo el mundoA VIP-section post on DarkForums (mirrored on Spear) advertises a 16.2 million-line URL:login:password corpus dated 06/11/2026, assembled from global stealer logs. No victim organization is named, which limits direct attribution. The volume still supports large-scale credential stuffing against corporate VPNs, webmail and e-commerce.LeakPriority 42
Filtración de 1,59 millones de registros de una aseguradora indiaA BreachForums user published a downloadable database of roughly 1.59 million rows linked to an Indian insurance provider ('OGNIGGERS'). Insurance records typically include names, contacts and policy details useful for social engineering and claims fraud. No Argentine or Latin American entity is involved, so priority is limited.LeakPriority 50
Base de datos de 160M de registros del Instituto de Crédito de Vietnam a la ventaA BreachForums seller is offering a 2025 dump attributed to a Vietnamese credit institution with more than 160 million records, potentially covering most of the adult population. Credit-bureau data usually includes identity, address and loan details that enable loan fraud and account takeover. The post looks dated, but the scale makes it a real, high-impact leak.LeakPriority 42
Base de datos de LinkedIn de usuarios indios ofrecida en BreachForumsA BreachForums post dated today offers an 'Indian LinkedIn Database', likely a large scraped dataset of professional profiles with names, employers and work emails. The scale suggests value for recruiting-themed phishing and business email compromise against Indian professionals and their employers. It is outside the AR/LATAM focus but is a fresh, sizable leak worth tracking.LeakPriority 80
Filtración de base de datos de ciudadanía y policía de TlaquepaqueDarkForums user qillnihhers is distributing a full database for the municipality of Tlaquepaque, Jalisco, combining citizen records with police data. Exposure of municipal police information endangers officers and enables impersonation and extortion, while citizen records fuel identity fraud and localised phishing. Mexican municipal governments are frequent targets and should validate this quickly.LeakPriority 84
Filtración de la base de datos de subsidios de SEDEM BoliviaA moderator on Spear Leaks published a database belonging to SEDEM, the Bolivian state entity for public productive enterprises, exposing subsidy beneficiary records. Posted roughly an hour ago, the dump links citizen identity data to public subsidy programmes, which is ideal for fraud and social engineering against vulnerable beneficiaries. Bolivian state entities should treat this as an active data exposure.