BRIEFLeakhighP60
Database leak of ULEAM University in Ecuador
ULEAM (Universidad Laica Eloy Alfaro de Manabí)
Detected6 November 2026 · 20:43 UTC
A user (Pheisito) posted on DarkForums a database attributed to ULEAM, the public Universidad Laica Eloy Alfaro de Manabí in Ecuador, dated today. Public universities hold student, staff and academic records whose exposure fuels credential stuffing and targeted phishing against employees. Being a freshly posted regional leak, it is worth validating the data and notifying the institution.
CategoryLeak
Severityhigh
Priority score60
Detected6 November 2026 · 20:43 UTC
LeakPriority 44
Filtración del código fuente de la herramienta de cumplimiento Compass GRC de CyRAACSSource code for the CyRAACS Compass GRC compliance platform was leaked and shared on BreachForums. Proprietary code exposure lets attackers hunt for vulnerabilities and hardcoded secrets, affecting organizations that deploy the compliance tool. Customers of the product face supply-chain risk and should review for exploitable flaws.LeakPriority 70
Filtración de datos de clientes de Ferrovie dello Stato (492.000 registros)Roughly 492,000 records of Ferrovie dello Stato Italiane customers were offered on BreachForums, containing contact and personal data. The national railway operator's customer base is exposed to targeted phishing and credential-stuffing. As transport critical infrastructure, leaked contact data also aids reconnaissance against corporate and staff accounts.LeakPriority 68
Filtración de datos de 536.000 clientes de la operadora italiana FastwebAbout 536k consumer records of Italian ISP Fastweb — emails, phones, postal addresses and birth dates — were posted as a database leak on BreachForums. The PII is directly reusable for phishing, SIM-swap and account-takeover against residential and business subscribers. As a major national ISP, the exposure raises both consumer-fraud and infrastructure-reconnaissance risk.LeakPriority 55
Base de datos de Binance de 335 millones de registros a la ventaA seller ('Felixben') on DarkForums posted on November 5, 2026 offering a claimed 335-million-record Binance database labelled '2026'. If genuine it would expose customer KYC and account data at one of the world's largest crypto exchanges; however, large 'Binance database' claims are frequently recycled or fake, so defenders should verify before reacting.LeakPriority 50
Alegado volcado de la base de datos de usuarios de IKEAA DarkForums user (XOUCAO, November 2026) posted a thread claiming to hold IKEA's user database with all customer personal information. The post shown includes no sample, record count or proof of access, so the claim is unverified and could be recycled or fabricated data. Retail customer databases of this size are valued for credential stuffing and targeted phishing campaigns.LeakPriority 60
Filtración de la base de datos interna de la Universidad Uniguaçu (Brasil)An actor on the Spear/Spear4h underground forum published an 'internal database dumped' entry attributed to Universidade Uniguaçu, a private Brazilian university; the thread is login-walled, so record counts and data types are not visible. University internal databases normally hold student, staff and financial records that fuel phishing and fraud. Brazilian education institutions are frequently targeted, so the claim should be verified directly with the institution.