BRIEFLeaklowP42
Database leak of Colombian firm Centrito.co (23K records)
Centrito.co (Colombia)
Detected14 September 2026 · 22:12 UTC
A leaked database of roughly 22,948 records from the Colombian site Centrito.co is being shared, containing user accounts, emails and phone numbers. The scale is modest, but it gives attackers valid credentials and contact data useful for credential-stuffing and targeted phishing against Colombian users. Affected accounts should be force-reset.
CategoryLeak
Severitylow
Priority score42
Detected14 September 2026 · 22:12 UTC
Leak● 48
Venta de base de datos con 905.000 matrículas francesas y datos personalesAn actor is advertising a dataset of roughly 905,000 French vehicle license plates bundled with associated personally identifiable information. If authentic, this is a large-scale privacy exposure enabling identity fraud, vehicle tracking and targeted scams against French residents. The thread is posted on a PwnForums onion mirror and is login-walled, so the seller and sample have not yet been verified; defenders should treat it as a credible large PII sale pending confirmation.Leak● 47
Vista previa de brecha de Wonder Rates con SSN y datos fiscalesA DarkForums actor is advertising a breach preview of Wonder Rates Brokerage containing SSNs, driver's licenses, tax and income records and financial details. Such data enables identity theft, loan fraud and account takeover, and the 'preview' format signals an imminent full sale or leak. Financial firms and identity-monitoring teams should watch for circulation of these records.Leak● 58
Filtración de la base de datos de Iraqi Airways en DarkForumsA DarkForums user posted, on October 30, 2026, a database allegedly belonging to Iraqi Airways, Iraq's national carrier. A national airline holds passenger PII, booking records and potentially sensitive travel data, making it a high-value target for fraud and phishing. Even if partial, the leaked records enable account takeover and follow-on social engineering.Leak● 54
Base de datos de 555.000 propietarios franceses a la ventaA PwsForums seller (Dedale) is offering a 555,000-record dataset described as French homeowner data, with the thread bumped within the last hours. The volume and the property-owner framing point to PII such as names, addresses and contact details rather than credentials, likely aggregated from real-estate or public records sources. Such lists enable high-quality phishing, impersonation and physical-risk targeting of French residents, and should be tracked even though no specific organisation is named.Leak● 62
Base de datos de ETFdb/VettaFi con 60 millones de registros a la ventaA seller on PwsForums is advertising a database attributed to ETFdb.com/VettaFi claiming 60 million records covering roughly 270,000 users, sold in the marketplace section. VettaFi is a US financial-data and indexing provider whose platforms serve asset managers and advisors, so the data may include professional contact details, subscription data and hashed credentials of financial-sector users. Large financial-data leaks are valuable for BEC, credential stuffing against investment platforms and follow-on social engineering of advisors.Leak● 48
Base de datos del DHS de EE.UU. ofrecida para descargaA thread on the Spear forum markets a downloadable database attributed to the US Department of Homeland Security; the body is login-restricted, so scale and authenticity remain unverified. Claims of this kind are often recycled or fabricated, but a genuine DHS-linked dataset would affect federal security operations and contractor data. It should be tracked as an unverified high-value leak claim pending validation.