BRIEFLeakhighP68
50 million records from Russian bank T-Bank (Tinkoff) leaked
T-Bank (Tinkoff)
Detected18 September 2026 · 01:12 UTC
Over 50 million records from Russian bank T-Bank (Tinkoff) are reportedly being sold for roughly $11,000 and partly released free. The data includes customer PII usable for account takeover and financial fraud. Its sheer scale makes it a benchmark large-bank leak worth tracking even outside Latin America.
CategoryLeak
Severityhigh
Priority score68
Detected18 September 2026 · 01:12 UTC
Leak● 58
Filtración de la base de datos de pH Electrónica S.A. (Buenos Aires)A database belonging to pH Electrónica S.A., an industrial analytical instrumentation firm in Buenos Aires, has been posted for download. Although not a government body, it is an Argentine company whose customer and business data could feed phishing and invoice fraud. It is directly relevant to Argentine incident responders.Leak● 50
Venta de 1 millón de datos personales de la firma británica mtglobal.orgA seller is offering roughly 1 million PII records belonging to UK international money-transfer firm mtglobal.org. The dataset enables identity theft and targeted financial fraud against its customers. It is a fresh, named-entity data sale relevant to financial-sector monitoring.Leak● 38
Filtración de base de datos de clientes de German Doner KebabA customer database attributed to German Doner Kebab (GDK) is being offered on a darknet forum in what appears to be a recent post. Customer PII enables phishing, fraud and loyalty-account takeover. Retail and food-sector defenders should verify the claim and prepare customer notification.Leak● 50
Filtración de 1,8M de logs de credenciales (stealer)A free dump of about 1.8 million URL:login:password credential logs from private stealer logs was posted to a leak forum. The volume makes it valuable for credential stuffing and account takeover across many services. Defenders should check exposure and force MFA and password resets for affected users.Leak● 62
Venta de 1M de datos personales de mtglobal.orgA seller is offering roughly one million PII records from mtglobal.org, a UK international money-transfer firm, in what appears to be a fresh listing. Customer identity and financial data fuels fraud, account takeover and regulatory exposure. Financial-sector defenders should watch for reused credentials and customer phishing.Leak● 46
Base de datos de ciudadanos de República Dominicana a la ventaAn actor claims to hold a citizens database of the Dominican Republic, potentially containing names, national IDs and other PII of a whole national population. It matters to LATAM defenders, but the post is dated February 2026, so it is likely a recirculated dump rather than a fresh breach.