BRIEFLeakhighP75
Australia Medicare database with 25 million records leaked
Medicare Australia
Detected28 September 2026 · 15:47 UTC
A seller is advertising roughly 25 million records tied to Australia's Medicare health program, posted on 26 September 2026 and therefore highly recent. The scale and the health/personal nature of the data make it a high-impact leak for identity theft and downstream fraud. Defenders should treat it as a live, monetized dump even though the victim is outside Latin America.
CategoryLeak
Severityhigh
Priority score75
Detected28 September 2026 · 15:47 UTC
LeakPriority 53
Filtración del sistema SYRIF del Banco Central de GuineaA DarkForums thread advertises data allegedly from the SYRIF system of the Central Bank of the Republic of Guinea (BCRG), a core financial infrastructure component. If genuine, exposure of central bank systems is high impact for the country's financial sector and payment flows. The post date is unclear, so authenticity and freshness must be verified before acting.LeakPriority 60
Filtración de datos de la aseguradora Ahorra SegurosA threat actor using the handle 'blasphemus' published on DarkForums a database reportedly belonging to Ahorra Seguros containing roughly 25,000 records, dated November 2026. The leak exposes customer data of a Spanish-speaking insurance company and could fuel fraud and targeted phishing. Treat affected customers' personal data and credentials as compromised.LeakPriority 40
Base de datos del dominio gubernamental francés osmose.numerique.gouv.fr filtradaA RaidForums thread offers for free a database apparently tied to the French government domain osmose.numerique.gouv.fr, a .gouv.fr service. If current, exposure of public-sector records is significant for French government defenders. The thread appears to originate from older RaidForums activity, so treat it as likely stale but verify scope and recency.LeakPriority 46
Venta de datos de FENIE Energía, del sector eléctrico españolSeller 'Leadstock' is offering data belonging to FENIE Energía, a Spanish electricity-sector entity, in the DarkForums marketplace. Energy-sector data is sensitive given its link to critical infrastructure and can enable fraud or targeted outreach to industry firms. Verify the authenticity and scope of the offered dataset.LeakPriority 52
Base de datos de Xiaomi China publicada en foro de hackingThreat actor 'Myra' posted a Xiaomi China database on SpyHackerz on October 30, 2026, including CSV files of service orders and related operational records. Exposure of a major electronics vendor's internal data can fuel phishing, warranty fraud and account takeover. Verify scope and monitor for reuse of the leaked records.LeakPriority 44
12 millones de credenciales de romwe.com circulan en xReactorA 12-million-record email:password dataset for romwe.com, an online fashion retailer, is being circulated on the xReactor forums. Such volumes of credentials enable credential stuffing against the retailer and reuse attacks on linked accounts. Users should reset passwords and enable MFA, and the company should hunt for account takeovers.