BRIEFLeakhighP73
Leak of 8 million records from French insurer AXA
AXA France (axa.fr)
Detected5 November 2026 · 20:23 UTC
A DarkForums post by user denlane190 advertises roughly 8 million records allegedly from axa.fr, a major European insurer. Data of this size typically includes customer PII and contract details valuable for fraud and phishing against policyholders. Financial-sector defenders should treat it as a credible large leak until denied.
CategoryLeak
Severityhigh
Priority score73
Detected5 November 2026 · 20:23 UTC
LeakPriority 35
Filtración alegada de bases .org.br y .eb.mil.br (OpCalibre22)A BreachForums thread claims a hack of Brazilian .org.br databases and the .eb.mil.br military domain under the tag #OpCalibre22. The 'OpCalibre22' label points to a 2022 operation, so this is likely recycled older material rather than a fresh breach, reducing its alert value. It still matters as a reference because .eb.mil.br is Brazilian Army infrastructure; defenders should treat the data as potentially valid for credential-stuffing context.LeakPriority 52
Base de datos de IndiHome (Telkom Indonesia) filtradaA leak thread on BreachForums offers a downloadable database attributed to IndiHome, the consumer fiber/broadband arm of Telkom Indonesia. Telecom subscriber data typically includes names, addresses, IDs and service details that enable fraud and targeted phishing. As a large national ISP, exposure here affects critical communications infrastructure and millions of subscribers, so defenders should confirm scope.LeakPriority 66
Dump de base de datos del CECyTE Zacatecas (México)A forum user posted a database dump attributed to CECyTE Zacatecas, a Mexican state technical-education system, on DarkForums. Such dumps typically contain student, guardian and staff records with identity and contact details that enable phishing and credential abuse. Because it is dated November 5, 2026, it should be treated as a fresh regional government-education exposure pending verification.LeakPriority 76
Base de datos del Instituto Electoral de Chihuahua a la ventaA threat actor published a dump allegedly belonging to the State Electoral Institute of Chihuahua, Mexico, in the DarkForums databases section. Electoral bodies hold voter rolls and staff contact data, so a leak can fuel phishing, identity fraud and targeting of officials. The post is fresh (November 5, 2026) and should be validated and treated as a sensitive government data exposure.LeakPriority 38
Volcado de usuarios de Active Directory del municipio de Fredrikstad (Noruega)A forum post on Spear by user kaya offers an Active Directory user dump from the Norwegian municipality of Fredrikstad. AD user listings enable username enumeration, password spraying and phishing against municipal staff. The post appears months old, so it is context rather than a fresh alert.LeakPriority 46
Posible filtración de datos de apollo.io publicada en 2026A DarkForums thread by user Jorpakor offers a file described as an apollo.io leak from 2026. Apollo.io aggregates B2B contact data, so a genuine release would expose business emails and firmographic details used in targeted phishing. The size and authenticity are unverified, so treat it as a lead to validate.