BRIEFLeakhighP78
Leak of 892,000 customer records from Antena Sur Comunicaciones (Personal)
Antena Sur Comunicaciones S.R.L. (personal.com.ar)
Detected8 November 2026 · 13:43 UTC
A DarkForums actor is advertising full WooCommerce administrator access plus roughly 892,000 customer and order records tied to Antena Sur Comunicaciones S.R.L., a dealer/reseller of the Argentine telecom operator Personal. The dump exposes names, contact data and purchase history of telecom customers, a sector classified as critical infrastructure in Argentina. Whoever holds admin access can also tamper with the store, inject skimming code or pivot toward related infrastructure.
CategoryLeak
Severityhigh
Priority score78
Detected8 November 2026 · 13:43 UTC
LeakPriority 62
Acceso admin a allpay.com.tw con 663.000 registros de clientesAn actor on DarkForums claims full administrative access to a Zoho CRM instance belonging to allpay.com.tw, a Taiwanese payment provider, along with roughly 663,000 customer PII records. Payment-gateway customer data is a high-value base for phishing, SIM-swap and downstream account takeover against merchants. Compromise of the CRM tenant also risks tampering with merchant onboarding and settlement details.LeakPriority 68
Venta de acceso admin a datos de Santander Consumer Alemania (419.000 registros)A DarkForums post offers full administrative access to a Salesforce Sales Cloud instance at santanderconsumer.de together with roughly 419,000 customer records. The data set covers consumer-finance customers of a major European bank brand, exposing personal and contract details valuable for fraud and targeted phishing. Admin-level CRM access also allows data exfiltration and manipulation of customer records.LeakPriority 72
Acceso admin a itsme.be con 412.000 registros de identidad KYCA DarkForums listing claims full administrative access to a Jumio KYC portal associated with itsme.be, the Belgian digital identity app used for government and banking logins, along with roughly 412,000 identity records. Identity-verification data of this kind enables account takeover, synthetic identity fraud and bypass of eIDAS-style onboarding controls. Any Belgian bank, insurer or public service relying on itsme should treat the exposure as a credential and trust-chain risk.LeakPriority 40
Filtración de la base de datos de MyFitnessPal publicada en BreachForumsA BreachForums thread shares a MyFitnessPal_BF.7z database archive for the fitness app. The content likely overlaps the well-known 2018 MyFitnessPal breach of over 140 million accounts, so it is probably a re-release rather than a new compromise. Still useful for credential-stuffing checks against users of the service.LeakPriority 48
Base de 30 millones de contactos de ZoomInfo a la ventaA seller on NulledBB advertises 30 million fresh business leads attributed to ZoomInfo, the business-data platform. The dataset is huge and likely scraped or leaked customer/contact records usable for targeted B2B phishing and social engineering. Organizations in the exposed pipeline should expect credential-phishing attempts referencing their staff data.LeakPriority 55
Base de datos de PII de clientes mexicanos de Cosmotienda a la ventaA threat actor is distributing a Cosmotienda customer PII database, a Mexican e-commerce platform, on BlackBones. The dump exposes personal data of Mexican consumers and is a strong base for phishing, identity fraud and account takeover. For a LATAM operator this is a concrete local victim with real consumer impact worth prioritizing.