BRIEFLeaklowP34
Hong Kong Hospital Authority database leak
ha.org.hk (Hong Kong Hospital Authority)
Detected12 September 2026 · 09:12 UTC
A forum user posted a downloadable dump allegedly taken from www.ha.org.hk, the Hong Kong Hospital Authority, a public healthcare body serving millions. If authentic it exposes patient and staff records useful for fraud, phishing and extortion. The post is dated 02-04-26, so it is not a fresh alert, but healthcare defenders outside the region should still verify exposure.
CategoryLeak
Severitylow
Priority score34
Detected12 September 2026 · 09:12 UTC
Leak● 25
Filtración de datos de 130.000 usuarios de BumbleA moderator on the Spear forum posted a 130k-user dataset tied to Bumble.com, dated March 2026. Though now months old, leaked profile and contact data can fuel targeted phishing and account-takeover attempts against users. Bumble users and trust-and-safety teams should remain alert to impersonation scams leveraging the exposure.Leak● 45
Base de datos de 6 GB de NTC Group a la ventaA 6GB database attributed to NTC Group (ntcgroup.com) is being offered on a Russian-language leak forum behind a login wall. The size suggests a broad dump of customer or internal records, though the exact contents and date are unverified. Partners and customers of this vendor should assess whether their data is included.Leak● 58
Filtración de tarjetas de 17.000 clientes del ICICI BankA forum post advertises a data leak affecting ICICI Bank, India's largest private-sector bank, exposing credit card details for roughly 17,000 customers. Compromised card data feeds card-not-present fraud and bank-impersonation phishing. Although the exact date is unclear, financial data leaks of a major bank warrant attention from fraud and CTI teams.Leak● 30
Combolist de 8 millones de credenciales usuario-contraseña a la ventaA forum user on xReactor published a fresh combolist of roughly 8 million email:password pairs, marketed as newly checked. The dump has no single named victim, so its main value is as fuel for credential stuffing and password spraying against any organization with weak MFA. Defenders should assume some corporate accounts may appear once the file propagates and proactively force resets on any exposed mail domains.Leak● 38
Filtración de la base de datos de la armería Guns.comThe pwnfrm leak forum lists a downloadable dump attributed to Guns.com, a US firearms and outdoor retailer. Customer records from a firearms seller are elevated-risk because they tie real identities to specific purchases, aiding extortion, burglary targeting and fraud. The post is behind a login wall with no sample, date or record count, so scale and recency are unverified.Leak● 40
Colección de bases de datos de votantes de Estados UnidosA leak-aggregator thread on the pwnfrm forum offers a bundle of US voter registration databases for download. Voter files expose names, home addresses, party affiliation and phone numbers at national scale, which fuels doxxing, targeted disinformation and impersonation. The thread is login-walled with no sample, date or record count, so freshness and scope cannot be confirmed.