BRIEFLeakhighP72
Leak of 50 million URL:LOG:PASS stealer-log credentials
Secretline.top / StarLinkClouds
Detected13 September 2026 · 18:12 UTC
A massive free dump of over 50 million URL:login:password lines extracted from infostealer logs was published on the Spear onion forum. The volume and clean URL:LOG:PASS format make it directly usable for credential stuffing and session hijacking against corporate and consumer accounts. Defenders should assume widespread credential reuse exposure and enforce MFA/rotate secrets.
CategoryLeak
Severityhigh
Priority score72
Detected13 September 2026 · 18:12 UTC
Leak● 38
Base de datos de la Politeknik Ilmu Pelayaran Semarang a la ventaA seller is offering a database from an Indonesian maritime polytechnic, likely containing student and staff records. Educational breaches expose PII and credentials that enable credential stuffing and phishing. Part of a batch of regional government and education datasets being dumped by the same actor.Leak● 44
Base de datos de números de WhatsApp activos a la ventaA seller on BreachForums is offering a database of active WhatsApp numbers, useful for bulk spam, smishing and account-registration fraud. Bulk verified phone numbers fuel social-engineering and OTP-interception campaigns. It is a lower-tier but actionable asset for fraud monitoring.Leak● 66
Filtración de base de datos de 4,5 millones de clientes de Maeva GroupA 4.5M-record customer database belonging to Maeva Group, a French vacation-rental operator, was posted for distribution on the Spear forum. The dump likely includes customer PII such as names, emails and booking details, enabling phishing and account-takeover attempts. A fresh leak of a real, sizeable company warrants monitoring for downstream fraud.Leak● 45
Filtración de la base de datos de la logística Mondial RelayA database tied to French parcel and logistics operator Mondial Relay has been posted on a breach forum, with the thread spanning nine pages of data. This suggests a substantial dump of customer or operational records from a real, well-known company. Worth tracking for downstream fraud and credential abuse against the firm and its partners.Leak● 55
Filtración de base de datos con 12 millones de estudiantes siriosA database of roughly 12 million Syrian student records covering 1993 to 2024 has been posted for download on a breach forum. The scale and multi-decade coverage make it a significant education/government-linked leak, although it sits outside Latin America. Monitor for identity-reuse and credential-stuffing risk affecting the exposed population.Leak● 48
Base de datos de clientes de CEGID filtrada (74K registros)A seller is offering a 74K-record customer database allegedly from CEGID, a French business-software vendor, tagged as fresh 2026 data spanning France, Belgium, Luxembourg and Spain. These records expose corporate contacts and licence details that enable invoice fraud and targeted BEC against CEGID's business clients. Spanish and Belgian customers should be warned about impersonation risk.