BRIEFLeaklowP44
Database leak of Yale University Press
Yale University Press (yalebooks.yale.edu)
Detected1 November 2026 · 12:24 UTC
A DarkForums thread lists a database from Yale University Press tied to the yalebooks.yale.edu domain, with no publication date visible and a small follower count in the thread. The likely contents are customer and order records from an academic publisher rather than sensitive government data. It matters mainly for credential reuse and targeted phishing against the publisher's customers and staff.
CategoryLeak
Severitylow
Priority score44
Detected1 November 2026 · 12:24 UTC
Leak● 71
Filtración de datos de 2,2 millones de personas en la Universidad de BostonA DarkForums post advertises a 2.2 million person dataset from Boston University covering personal information, payment details and academic degrees. Payment and enrolment data make this useful for financial fraud and for credential-stuffing against university SSO and student portals. Academic institutions are also frequent ransomware targets, so a confirmed leak can precede extortion.Leak● 74
Filtración de 8 millones de registros de la aseguradora AxaA DarkForums user (Mirnumen) published a roughly 8 million record database tied to French insurer Axa on 31 October 2026, the largest named-entity leak of this batch. Insurance records typically carry names, addresses, policy numbers and contact data that feed highly credible phishing and identity-fraud campaigns. Partners, brokers and customers who reuse credentials on Axa portals are directly exposed.Leak● 66
Filtración de la base de datos de Cultura.com con 2 millonesDarkForums user Wraxniter published a database attributed to French cultural retailer Cultura.com on October 31, 2026, claiming 2 million records. The data likely includes customer account details that can support phishing, account takeover, and credential reuse. Although smaller than other leaks, it is fresh and tied to a real retailer with a large customer base.Leak● 76
Filtración de 31,1 millones de registros de FitnessParkOn October 31, 2026, DarkForums user Lynyetol posted a database attributed to French gym chain FitnessPark with 31.10 million records. The volume suggests customer names, emails, phones, and possibly credentials, which are valuable for phishing and credential-stuffing. French organizations and FitnessPark customers should treat the exposure as a fresh, large-scale leak.Leak● 80
Filtración de datos de 31,1 millones de ciudadanos israelíesDarkForums user Torramyr posted a 31.10 million-record dataset labeled as Israeli citizens' data on October 31, 2026. If authentic, the scale exposes national PII that can fuel identity theft, phishing, and impersonation campaigns. The freshness and volume make it a high-priority leak for Israeli organizations and defenders monitoring regional exposure.Leak● 88
Filtración de facturas del Instituto de Movilidad de Quintana RooA DarkForums thread exposes invoices from Mexico's Quintana Roo state mobility institute (IMOVEQROO), potentially revealing taxpayer names, amounts, addresses, and supplier data. As a government body, the exposure can enable fraud, impersonation, and targeted attacks against official procedures and payments. Defenders should verify the dataset and notify authorities if the leak is confirmed.