BRIEFLeakhighP55
Database leak of US retailer Spencer's (spencers.com)
Spencer's (spencers.com)
Detected7 November 2026 · 12:43 UTC
A database dump attributed to US retail chain Spencer's (spencers.com) was posted on BreachForums/DarkForums by actor scarlettgroup on 7 November 2026. As a national retail brand, Spencer's holds customer PII, loyalty and possibly transaction records, all attractive for fraud. The posting is fresh and the same data is being re-shared across forums quickly.
CategoryLeak
Severityhigh
Priority score55
Detected7 November 2026 · 12:43 UTC
LeakPriority 38
Base de datos de AU Small Finance Bank (India) a la ventaThe Darkpro carding forum advertises a database attributed to AU Small Finance Bank, an Indian scheduled commercial bank, with no stated record count or date. If authentic, customer or KYC data of a regulated bank is circulating, enabling fraud and targeted phishing against account holders. Scale and authenticity are unverified, so this is a low-confidence lead worth monitoring.LeakPriority 42
Filtración de base de datos de la estatal PT Surveyor IndonesiaThe actor 'Sophia' posted on DarkForums an alleged ~12,000-record dump of E-Pengadaan, the e-procurement platform of PT Surveyor Indonesia, a state-owned inspection firm. Procurement data exposes supplier contacts, contracts and staff emails usable for targeted phishing. Scale is modest and the date is unconfirmed, so it is a watch item rather than an alert.LeakPriority 46
Colección de base de datos de Virtue Maritime ShipmanagementA database collection attributed to Virtue Maritime Shipmanagement Corporation was posted in the BreachForums Leaks section. Maritime crewing and staffing records can expose seafarer personal data, identity documents and operational contact details. The full scale is unconfirmed, but ship operators and crewing agencies linked to the firm should assess exposure.LeakPriority 58
Venta de 6,5 millones de leads de clientes bancarios de IsraelA seller on BreachForums is advertising 6,519,993 'HQ Israel Bank Leads', a large dataset tied to Israeli banking customers. Even if assembled from marketing and aggregation sources, this volume of financial-sector contact data enables targeted phishing, smishing and account takeover against bank clients. Israeli banks and their customers should monitor for credential abuse and social engineering.LeakPriority 76
Base de datos de 832GB de business.adobe.com publicadaA threat actor using the handle UNC6783 posted a claimed 832GB database allegedly from business.adobe.com on DarkForums on 7 November 2026. The volume suggests large amounts of business customer, account and potentially contract data that could fuel credential stuffing, phishing and B2B fraud. Organizations relying on Adobe business services should treat this as a live exposure until the claim is independently verified.LeakPriority 62
Filtración de datos de 2 millones de vehículos y usuarios de Nuevo LeónA forum user published for free a dataset of roughly 2 million combined vehicle-registration and user records attributed to Nuevo León, Mexico, on DarkForums. The dump appears to bundle names, addresses and vehicle identifiers tied to residents. Because state vehicle-registry data enables identity fraud, targeted phishing and physical-location risk, Mexican authorities and affected residents should treat these records as exposed.