BRIEFLeakhighP70
Resamania.fr fitness member database leaked (5.2M records)
Resamania (France)
Detected13 September 2026 · 15:12 UTC
A threat actor is selling a 5.2M-record membership database from French fitness chain Resamania.fr, described as fresh 2026 data. Member records typically include names, emails, phones and addresses, ideal for phishing, smishing and credential stuffing. Fraud and privacy teams should prepare for customer-targeted campaigns and GDPR exposure.
CategoryLeak
Severityhigh
Priority score70
Detected13 September 2026 · 15:12 UTC
Leak● 52
Base de datos de RedClinica y clínicas asociadas publicada gratisDarkForums user Synq1xxss posted a free release labeled 'RedClinica full 2026 & more clinics', a database tied to a clinic network and associated medical facilities. Healthcare data is highly sensitive, exposing patient and staff information usable for fraud and extortion. The exact organization and country are not confirmed, but the health-sector scope makes it worth triage.Leak● 42
Venta del volcado de 1,8 TB de la base de datos de Serasa (Brasil)A seller is advertising 1.8 TB of Brazilian credit-bureau data attributed to Serasa, with more than 260 million rows, across BreachForums, DarkForums and RaidForums mirrors. The material is explicitly dated 2024, so it is a recirculated or resold old dataset rather than a new breach. It still matters for Brazilian defenders because credit and identity data of that scale fuels loan fraud and account takeover for years.Leak● 55
Volcado completo de datos de paidwork.com a la ventaA full database dump of paidwork.com was posted on DarkForums on 28 October 2026 by the user Tanaka, indicating a freshly advertised breach. The record count is not visible in the snippet, but the framing as a complete "FullDump" suggests account and profile data for the whole user base. Affected users face credential-stuffing risk and follow-on fraud if emails and passwords are included.Leak● 58
Filtración de datos de Cellebrite y MSAB en foro undergroundA thread posted on DarkForums on 26 October 2026 claims a leak affecting Cellebrite and MSAB, the two leading mobile forensic extraction vendors used by police and prosecutors worldwide. If genuine, exposed documentation or tooling details could help suspects detect, evade or attack forensic processes, and may reveal law-enforcement customers. Investigators relying on these platforms should treat the claim as credible until validated.Leak● 66
ShinyHunters publica datos filtrados de AlconThe ShinyHunters group posted a leak of Alcon.com data on DarkForums on 28 October 2026, the same day the thread was discovered. Alcon is a major eye-care and surgical device manufacturer, so leaked corporate or customer data could support business email compromise and supply-chain targeting. The claim is fresh and from a high-profile actor, which raises confidence that real data is circulating.Leak● 72
Filtración de datos de las policías de Abu Dhabi y Dubái (EAU)On DarkForums, user Daxorpuzan published a leak attributed to Abu Dhabi and Dubai police on October 26, 2026. Police datasets typically expose officer names, internal contacts and operational details that enable targeted phishing and impersonation. Even outside Latin America, it is a fresh government leak worth tracking for cross-border links.