BRIEFLeaklowP44
500MB of UAE data leaked on BreachForums
UAE (unspecified entity)
Detected29 October 2026 · 08:24 UTC
User Pppp98989 posted a 500MB dataset labeled 'UAE data ICP' in the BreachForums leak section on 29 October 2026, but the description gives no named organization or sector. The volume is modest and the source entity is unidentified, so impact cannot yet be assessed. It is worth tracking only to see whether a UAE government or critical-sector body is later named.
CategoryLeak
Severitylow
Priority score44
Detected29 October 2026 · 08:24 UTC
Leak● 30
Combolist de 127.400 credenciales de usuarios de BrasilA 127,400-line Brazilian email:password combolist labelled as fresh and private was posted on xReactor on 28 October 2026. It is a commodity credential set with no named victim organisation, but its size and country focus make it directly usable for account-takeover and phishing campaigns against Brazilian users and services.Leak● 32
Combolist con 88.899 credenciales de usuarios mexicanosThe user el_capitan published on DarkForums an 88,899-line email:password combolist attributed to Mexico, dated 29 October 2026 and therefore still fresh. It is a credential-stuffing corpus rather than a breach of one named organisation, but it concentrates on Mexican accounts and fuels account-takeover attempts against local services and portals.Leak● 82
Filtración de base de datos del Partido Nacional de UruguayA new forum account (ExPresidents, registered Oct 2026) posted a database allegedly belonging to Uruguay's Partido Nacional–Partido Blanco on the Spear Leaks forum, announced as 'breaking news' roughly an hour before collection. As the party currently in government, its affiliate, militant and voter-contact records could expose citizens' personal data and internal political infrastructure. Defenders should treat leaked lists as a spear-phishing and influence-operation feedstock.Leak● 52
Getir y BiTaksi sufren filtración de 200.000 clientesA forum user posted a fresh dump of about 200,000 customer records from Getir and BiTaksi, two Turkish delivery and ride-hailing services. The data likely includes names, phone numbers and addresses useful for fraud and smishing. The post appeared on DarkForums around 26 October 2026.Leak● 58
Filtración de 2 millones de registros de la francesa Cultura.comThe user Bynnekor posted a 2M-record database attributed to Cultura.com, a French cultural goods and bookstore retailer, on DarkForums on 16 October 2026. At that scale the dump likely contains customer account and contact details usable for credential stuffing and targeted fraud against French consumers. It is relevant because the size and recency make reuse against other retail accounts likely.Leak● 56
Base de datos de Genesys Cloud Services filtradaA DarkForums post advertises a database attributed to Genesys Cloud Services, a major US contact-center and cloud provider used by many enterprises and public agencies. A leak here could expose customer records and integration secrets. Date and volume are unstated, so verification is needed.