BRIEFLeakhighP55
6.8GB database leak of Boston University
Boston University
Detected6 November 2026 · 23:43 UTC
A 6.8GB database attributed to Boston University has been posted for download on BreachForums. The volume is large enough to hold student, faculty and applicant records, although the record count and schema are not detailed in the thread. University data supports credential stuffing and targeted phishing against a large academic community.
CategoryLeak
Severityhigh
Priority score55
Detected6 November 2026 · 23:43 UTC
LeakPriority 63
Filtración de datos de la aerolínea Plus Ultra en Venezuela y EspañaA free leak on DarkForums claims data from Plus Ultra Líneas Aéreas, a carrier operating routes between Spain, Venezuela and other Latin American destinations. Airline records usually include passenger identity, contact and booking details, which enable targeted phishing and travel fraud. The exact record count and schema are not stated, so scope still needs validation.LeakPriority 60
Base de datos de estudiantes del ITLA (República Dominicana) en venta en DarkForumsThe same ITLA student database (23,000+ records) is also circulating on DarkForums, indicating broader distribution across multiple leak forums. Student personal data is exposed to prospective buyers and downloaders, raising the risk of downstream phishing and identity theft. This duplication across forums signals an active, ongoing leak that defenders should track.LeakPriority 68
Base de datos de 23.000 estudiantes del ITLA de República DominicanaA 23,000+ record student database belonging to the Instituto Tecnológico de las Américas (ITLA), a public technological institute in the Dominican Republic, is offered on BreachForums. The dump covers student names and academic identifiers usable for phishing, credential stuffing and identity fraud against students and staff. It is one of the few Latin American education-sector leaks in this batch.LeakPriority 44
Filtración del código fuente de la herramienta de cumplimiento Compass GRC de CyRAACSSource code for the CyRAACS Compass GRC compliance platform was leaked and shared on BreachForums. Proprietary code exposure lets attackers hunt for vulnerabilities and hardcoded secrets, affecting organizations that deploy the compliance tool. Customers of the product face supply-chain risk and should review for exploitable flaws.LeakPriority 70
Filtración de datos de 492k clientes del grupo ferroviario italiano Ferrovie dello StatoA dataset of roughly 492,000 records of Italian national railway customers, including contact and personal data, is offered for sale on BreachForums. Ferrovie dello Stato is core transport critical infrastructure, and the exposed records enable targeted phishing against travellers and staff. The large scale and critical-sector victim make this a notable sale despite being outside Latin America.LeakPriority 68
Base de datos de ~536k clientes de la italiana Fastweb a la ventaA seller on BreachForums is offering roughly 536,000 records of Fastweb customers, an Italian ISP, including emails, phones, addresses and birth dates. ISP customer data is sensitive for identity fraud and SIM-swap or phishing attacks, and Fastweb is a major telecom provider. The size and telecom-sector context make this a notable database sale.