BRIEFLeakhighP60
689,000 records leaked from France's urssaf.fr portal
URSSAF (Francia)
Detected19 October 2026 · 21:39 UTC
A fresh DarkForums post offers roughly 689,000 records tied to PajEmploi, a service of France's URSSAF social-contribution agency. Such data can be abused for fraudulent benefit claims, impersonation and business-owner phishing. Because the source is a government social-security body, the identity exposure is especially sensitive.
CategoryLeak
Severityhigh
Priority score60
Detected19 October 2026 · 21:39 UTC
Leak● 55
Filtración de datos de cointracker.ioA DarkForums poster claims a leak of the cryptocurrency portfolio-tracking service cointracker.io, published roughly eight hours ago. Such a leak could expose user emails, wallet-linked holdings and account data, raising phishing, account-takeover and targeted-theft risk for crypto holders. Fresh and tied to a named real service, so worth validating the dataset sample and size.Leak● 56
Venta de bases de datos brasileñas en BreachForumsA seller in BreachForums' marketplace is advertising an 'updated' set of databases sourced from Brazil, a LATAM jurisdiction of direct interest. If genuine, this represents bulk exfiltrated records of Brazilian organizations being monetized, enabling fraud, credential stuffing and downstream intrusion. The post is undated and vague on volume and victims, so scope needs confirmation before treating as fresh.Leak● 40
Filtración de datos del sitio gubernamental indio ICAR PuneA five-hour-old post claims a database leak from ataripune.icar.gov.in, a subdomain of India's agricultural research council. Government research portals often hold staff and research data useful for phishing and reconnaissance against public institutions. It is outside the Latin American focus but still a genuine government-domain exposure.Leak● 45
Base de datos filtrada del emisor iraquí de tarjetas QiCardA new DarkForums thread advertises a leaked database from QiCard, Iraq's main national payment-card provider. Compromised cardholder or subscriber data from a payment system carries direct financial-fraud and account-takeover risk. Scale and authenticity are not yet evidenced, so verification is required.Leak● 50
Venta de la base de datos de Motos del Oriente (Colombia)A seller is offering a database of about 207,000 records from the Colombian motorcycle dealer Motos del Oriente. Customer PII from a retailer supports phishing, credit application fraud and impersonation of buyers. It is a modest but regional leak worth tracking for Colombian consumer and financial-sector defenders.Leak● 50
Venta de 10 millones de datos personales de Thrive Online GroupA seller lists roughly 10 million PII records belonging to South Africa's Thrive Online Group for sale on a private forum. The volume and personal-data nature make it valuable for identity theft and large-scale phishing against South African consumers. Details are login-walled, so scope and recency still need independent confirmation.