BRIEFLeaklowP40
6.95M URL:LOG:PASS stealer logs leaked (DAXUS)
DAXUS / múltiples servicios
Detected13 September 2026 · 01:12 UTC
A 6.95 million-line URL:LOG:PASS stealer-log dump was uploaded to DarkForums and advertised by the handle DAXUS. Such logs hold live credentials harvested by infostealers and are used for account takeover and VPN/SSO intrusion. No single victim is named, so it is a broad credential-exposure alert rather than a targeted access sale.
CategoryLeak
Severitylow
Priority score40
Detected13 September 2026 · 01:12 UTC
Leak● 45
Venta de 11 GB de datos de la agencia Avea VacancesA listing on a BreachForums-style onion site offers 11 GB of data from French travel agency Avea Vacances. Travel firms hold passport and booking data attractive for fraud and phishing. Affected customers and partners should watch for identity-theft attempts using this information.Leak● 55
Venta de 66 GB de datos de la óptica francesa Krys.comA listing on a BreachForums-style onion site advertises 66 GB of stolen data from Krys, a major French optical retail chain. A dataset of this size likely holds customer and corporate records that can fuel fraud and further intrusion. Retail defenders should watch for leaked customer data and credential reuse.Leak● 58
Filtración de base de datos de pasaportes e identidad de IsraelA SpyHackerz thread claims a full leak of Israel's passport and identity database, a national-level government record set. Such data enables identity fraud and targeted attacks against citizens and officials. Posted in July 2026 and outside the region, its scale still warrants monitoring for reuse in credential and KYC fraud.Leak● 50
Filtración de sistema SCADA de E&R Wind Power en VietnamA BreachForums leak shares data from an E&R Wind Power SCADA monitoring system in Vietnam, part of a renewable-energy OT estate. SCADA monitoring data can expose grid integration points, device identifiers and operator workflows. Operators should check whether similar monitoring interfaces are internet-exposed.Leak● 55
Filtración de consola SCADA de subestación eléctrica de HaryanaA BreachForums 'Other Leaks' collection titled 'Haryana SCADA Substation Operator Console' exposes industrial control data from an Indian power substation. Operator-console material can reveal network topology and credentials useful for OT intrusions. Energy defenders should treat it as a SCADA exposure signal even outside the region.Leak● 40
Filtración de datos de la aseguradora AXA Colpatria (Colombia)A RaidForums mirror thread advertises a downloadable database from AXA Colpatria, one of Colombia's largest insurers, exposing customer and policy data of a regulated financial entity. The thread carries no clear recent date and RaidForums mirrors usually re-post archival material, so this is likely a re-circulation of an older breach rather than a fresh incident. It still matters for Colombian banking/insurance supervisors and for fraud teams monitoring misuse of policyholder records.