BRIEFLeakhighP64
US 50-state database leak with SSNs, selfies and bank statements
Detected3 October 2026 · 16:03 UTC
An actor is advertising a US 50-state database leak bundled with physical IDs, SSNs, selfies and bank statements. Combining identifiers with identity documents enables account takeover, loan fraud and large-scale synthetic identity theft. A dataset with this breadth of PII and ID documents is a serious identity-fraud resource.
CategoryLeak
Severityhigh
Priority score64
Detected3 October 2026 · 16:03 UTC
Leak● 45
Filtración de base de datos de clientes de la joyería TraxNYCA database of 182,327 TraxNYC customer records is being shared, exposing full names, emails, phone numbers, shipping addresses, order IDs and purchase details. The jeweler is US-based so regional impact is limited, but the leaked PII enables phishing and account takeover against its customers. Worth tracking as a confirmed corporate breach, not a fresh regional alert.Leak● 42
Filtración de base de datos de clientes de TraxNYC (182.327 registros)A leaked database with 182,327 records of TraxNYC customers is available for download, exposing full names, email addresses and shipping addresses. The data supports targeted phishing, order fraud and identity theft against the retailer's clients. Volume is moderate, but the leak is a real, named-organization breach worth noting.Leak● 60
Base de datos mundial de pasaportes a la venta, con selfiesA 'worldwide passport database' accompanied by selfies is being offered on BreachForums. Passport scans plus selfies are a goldmine for KYC bypass, forged travel documents and fraudulent account opening. Because it claims to be global, it can include Latin American citizens' data and warrants regional attention.Leak● 45
Base de datos de 430.000 usuarios del exchange iraní OMPFinexA database with 430,000 users of the Iranian crypto exchange OMPFinex was posted. It exposes customer identities and account data for a financial platform. Such leaks fuel phishing, account takeover and regulatory scrutiny of crypto services.Leak● 66
Base de datos de Modern Hire con 9 millones de registrosA breach dump labelled modernhire.com (Modern Hire, a US hiring and assessment platform) claiming 9 million records is circulating on BreachForums. Employment and applicant data at this scale fuels credential stuffing, recruiting-themed phishing and downstream fraud against employers and candidates. The volume and HR context make it relevant to defenders of recruitment and HR supply chains.Leak● 62
Base de datos de 23 millones de clientes de bancos chinos a la ventaA seller is offering 23 million records of Chinese bank customers with names, phone numbers, account and ID numbers, and dates of birth. The data supports account takeover, payment fraud and identity theft. It signals a large-scale financial-sector breach with cross-border fraud potential.