BRIEFLeakhighP46
Leak of 6.1 million OpenSea user email addresses
OpenSea
Detected24 September 2026 · 22:47 UTC
A 6.1 million-row dump of OpenSea user email addresses was posted for download. Although the data is now several months old, its scale makes it a high-value phishing and credential-stuffing seed list for crypto/NFT users. Defenders should assume these addresses are compromised and monitor for targeted phishing.
CategoryLeak
Severityhigh
Priority score46
Detected24 September 2026 · 22:47 UTC
LeakPriority 72
Filtración de base de datos de Coca-Cola FEMSAA database attributed to Coca-Cola FEMSA, one of Latin America's largest beverage bottlers operating across Mexico, Brazil and Argentina, was posted to DarkForums' leak section by user Rozwawyn. The thread is recent, suggesting a fresh exposure of corporate or customer data rather than an old repost. Defenders in the food-and-beverage and consumer-goods supply chain should assess whether their data or credentials appear in the dump.LeakPriority 50
Filtración masiva de datos de Emiratos Árabes Unidos a la ventaA seller advertises a large UAE-origin data leak exclusively on DarkForums at a low price. The listing claims a bulk dataset but does not disclose the victim organization or record count in the snippet, limiting immediate attribution. Investigators should request samples to confirm authenticity and assess whether government or critical-infrastructure entities are included.LeakPriority 60
Base de datos del portal gubernamental de Arabia Saudita a la ventaA seller on DarkForums is offering a database described as belonging to a Saudi government portal, posted in the marketplace leak section by user agoner. Government portal databases typically contain citizen records, credentials and internal identifiers, making this a high-impact state-sector asset. The date is unclear, so buyers and investigators should verify freshness before treating it as a live breach.LeakPriority 76
Filtración de base de datos POS de Vivo Brasil con 4,7 millones de registrosA 4.76-million-record POS database attributed to Vivo, a major Brazilian telecom operator, is being distributed for download on BreachForums. The release exposes customer and point-of-sale data tied to a critical telecom provider. Leaks of this scale fuel fraud and credential-stuffing against the operator and its users.LeakPriority 85
Filtración de base de datos del Banco Pichincha de EcuadorThe actor Pheisito published on DarkForums a database attributed to Banco Pichincha, one of Ecuador's largest private banks, together with a communiqué. The post is dated November 10, 2026, making it a fresh release. Leaked banking customer data exposes account holders to fraud and phishing and requires immediate verification.LeakPriority 62
Filtración de datos y defacement de Conalep MorelosA threat actor using the handle 'flaco' posted on DarkForums a database of roughly 24,000 records belonging to Conalep Morelos, a Mexican public technical-education institution under the SEP, alongside claims of website defacement. Exposure of student/staff personal data from a government education body raises risks of identity fraud and credential abuse. Defenders should treat it as a confirmed compromise of a public-sector entity and assess what personal data fields were included.