PULSE
FEED
ransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilitiesransomthegentlemen reclama a City of Humboldt · CA · Government & Defenseransomthegentlemen reclama a Reso Tech Laurentides · CA · Technologyransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilitiesransomthegentlemen reclama a City of Humboldt · CA · Government & Defenseransomthegentlemen reclama a Reso Tech Laurentides · CA · Technology
Kalir Brief · Item12 November 2026 · 23:13 UTC
BRIEFLeakhighP66

12.11M-record Gemini database leak

Gemini (exchange de criptomonedas)

Detected12 November 2026 · 23:13 UTC
Why it matters

A 12.11 million-record database attributed to crypto exchange Gemini was posted on DarkForums by user Darkiros687 in the Databases section. If authentic, it exposes customer PII and account identifiers, enabling targeted phishing, account takeover and regulatory exposure. Crypto exchange users are high-value targets for credential and wallet-draining attacks.

MetadataRECORD
CategoryLeak
Severityhigh
Priority score66
Detected12 November 2026 · 23:13 UTC
Related items6
LeakPriority 48
Filtración de 593K cuentas de Netplaygo en BrasilA dataset of roughly 593,000 records belonging to Netplaygo, a Brazilian online gaming/entertainment platform, was published for download on the SpyHackerz forum by user C0Ld in late June 2026. The dump exposes customer account data usable for credential stuffing and phishing against Brazilian users. Though not government-linked, it is a sizable regional leak worth monitoring.
4h
LeakPriority 72
Filtración de datos del contratista del DoD Bristol IndustriesThe Settea group published data allegedly stolen from Bristol Industries LLC, a U.S. Department of Defense contractor managing FUDS program records that include controlled unclassified information, coordinates of thousands of military sites, and chemical-weapons burial data. This is among the most sensitive victims in the batch and could support reconnaissance or targeting. Defense supply-chain partners should treat it as a priority exposure.
4h
LeakPriority 53
Filtración del sistema SYRIF del Banco Central de GuineaA DarkForums thread advertises data allegedly from the SYRIF system of the Central Bank of the Republic of Guinea (BCRG), a core financial infrastructure component. If genuine, exposure of central bank systems is high impact for the country's financial sector and payment flows. The post date is unclear, so authenticity and freshness must be verified before acting.
5h
LeakPriority 60
Filtración de datos de la aseguradora Ahorra SegurosA threat actor using the handle 'blasphemus' published on DarkForums a database reportedly belonging to Ahorra Seguros containing roughly 25,000 records, dated November 2026. The leak exposes customer data of a Spanish-speaking insurance company and could fuel fraud and targeted phishing. Treat affected customers' personal data and credentials as compromised.
6h
LeakPriority 40
Base de datos del dominio gubernamental francés osmose.numerique.gouv.fr filtradaA RaidForums thread offers for free a database apparently tied to the French government domain osmose.numerique.gouv.fr, a .gouv.fr service. If current, exposure of public-sector records is significant for French government defenders. The thread appears to originate from older RaidForums activity, so treat it as likely stale but verify scope and recency.
6h
LeakPriority 46
Venta de datos de FENIE Energía, del sector eléctrico españolSeller 'Leadstock' is offering data belonging to FENIE Energía, a Spanish electricity-sector entity, in the DarkForums marketplace. Energy-sector data is sensitive given its link to critical infrastructure and can enable fraud or targeted outreach to industry firms. Verify the authenticity and scope of the offered dataset.
6h