BRIEFLeakhighP60
Tea app 55 GB leak exposes chats and ID documents
Tea (aplicación)
Detected18 September 2026 · 20:12 UTC
A 55 GB dump from the Tea app is being freely distributed, containing private chats, direct messages, verification documents, licences and selfies. The scale and the presence of government-issued ID images make it a serious privacy and identity-fraud exposure for the app's user base. Defenders monitoring leaked KYC/document troves should flag it for downstream impersonation and sextortion risk.
CategoryLeak
Severityhigh
Priority score60
Detected18 September 2026 · 20:12 UTC
Leak● 47
Filtración gratuita de datos de la aerolínea Plus Ultra (Venezuela y España)A thread titled 'FREE Plus Ultra Airlines Venezuela Spain and Latin America' was published on DarkForums, indicating a giveaway of data tied to the Spanish carrier that operates routes across Venezuela and Latin America. The content is behind a login wall, so record volume and whether it is customer, booking or loyalty data remain unconfirmed. Airline passenger data is directly usable for phishing, loyalty-account takeover and travel-payment fraud against regional travellers.Leak● 54
Base de datos de 125 GB con números de Seguridad Social de EE. UU. a la ventaA 125 GB dataset advertised as a US Social Security Number database is being offered on DarkForums (thread 119697); the listing is login-walled, so the true record count and freshness cannot be verified. SSN-level records remain the single most reusable identity-fraud primitive, enabling credit fraud, tax fraud and account takeover at scale. Defenders should treat it as a probable repack of previously breached US data unless sampling proves otherwise.Leak● 52
Filtración de base de datos de la tienda online surcoreana MetreeA 2026 database sample from the South Korean e-commerce site metree.co.kr is being traded on DarkForums, indicating customer order and account records are in circulation. Merchant and Korean retail defenders should validate the sample against internal records and prepare for credential-stuffing and fraud attempts against shoppers.Leak● 78
Base de datos de Binance de 335 millones de registros a la ventaSeller 'darkleaks' on DarkForums advertises a 335-million-record Binance dataset posted 1 Nov 2026, offering samples to prospective buyers. If genuine, it exposes customer KYC, contact and trading data at scale, feeding phishing and account-takeover campaigns against crypto users and exchange staff.Leak● 32
Colección KYC de Alphaex con 15.000 pasaportes y licenciasAn xReactor thread offers roughly 15,000 KYC documents — passports and driving licences — tied to Alphaex customer accounts. The thread sits deep in pagination (page 46), indicating the dump is old and previously circulated rather than a fresh breach. It remains useful for identity-fraud and KYC-verification abuse detection, but is not a fresh alert.Leak● 58
Presunta filtración de documentos y datos de usuarios de BinanceA DarkForums thread (ID 120196) advertises a 2026 leak of Binance internal documentation and customer/user data, though the content is login-walled and unverified. If authentic, it would expose account and possibly KYC data of a major global crypto exchange, fuelling fraud, account takeover and downstream credential abuse. Exchanges and their customers should treat this as a watch item until the dump is confirmed.