BRIEFLeaklowP45
Database leak of Bahrain's SHENA government authority
Bahrain SHENA
Detected19 October 2026 · 16:39 UTC
A threat actor has posted a database belonging to Bahrain's Safety, Health and Environment National Authority (SHENA), a government regulator, on the Spear Leaks forum. Exact record counts and fields sit behind the listing, but regulator data typically exposes internal staff accounts, emails and contact records that fuel targeted phishing against civil servants. Defenders watching Gulf government exposure should track it for downstream credential abuse.
CategoryLeak
Severitylow
Priority score45
Detected19 October 2026 · 16:39 UTC
Leak● 34
Combolist de 13,4 millones de credenciales URL:LOG:PASS difundidoA freshly dated combo list of roughly 13.4 million URL:login:password entries was released publicly. It is a generic credential dump rather than a single-organization breach, but at this scale it is valuable for credential stuffing against corporate VPNs, email and SaaS portals. Defenders should watch for password reuse and force resets on exposed accounts.Leak● 36
Base de datos de AT&T con 70 millones de registros publicada en foroA forum post offers a 70 million record AT&T database, a very large telecom dataset likely containing customer PII. The post is dated February 2026 and the underlying AT&T data is widely known and recycled, so it is not a fresh breach. It still matters for PII exposure and fraud monitoring but is not an actionable new alert.Leak● 40
Filtración de la base de datos inmobiliaria de MykukunThe breach forum lists a leaked database from Mykukun, a real-estate data and analytics provider. Real-estate professional account data can be leveraged for business email compromise and targeted phishing. Smaller scale but still relevant for monitoring credential reuse.Leak● 48
Filtración de base de datos de clientes de Spytec GPS con 131.000 registrosA customer database of GPS-tracking vendor Spytec containing about 131,000 records is listed on a breach forum. Tracking-service customer data can expose physical-location and contact details, aiding stalking and fraud. It is a moderate-size leak worth monitoring for reused credentials.Leak● 52
Base de datos de Hallmark con 8 millones de registros a la ventaA dataset of roughly 8 million records labelled Hallmark is offered for download on a breach forum, suggesting a large customer or account database leak. At that scale it enables credential stuffing and targeted phishing against the brand and its partners. Defenders should check for reuse of corporate accounts in the dump.Leak● 47
Filtración de base de datos de la autoridad SHENA de BrunéiA database attributed to Brunei's Safety, Health and Environment National Authority (SHENA) has been posted for download on a breach forum. As a national regulatory body, it likely handles internal staff, inspection and compliance records whose exposure raises government-targeting and phishing risk. Though outside the AR-LATAM focus, government database leaks are worth tracking due to possible downstream supply-chain or credential reuse.