BRIEFLeakhighP72
Adobe database leak of 13 million records
Adobe (business.adobe.com)
Detected27 September 2026 · 13:48 UTC
An actor posted a claimed 832 GB database of 13 million records tied to business.adobe.com on a dark-web forum, offered for download. If genuine, it exposes corporate account and credential data at very large scale and can fuel credential-stuffing against Adobe-linked enterprise accounts. Defenders should track reuse of affected IDs and force resets where relevant.
CategoryLeak
Severityhigh
Priority score72
Detected27 September 2026 · 13:48 UTC
LeakPriority 65
Venta de base de datos completa de la Universidad de HarvardA threat actor on DarkForums is advertising the full database of Harvard University, noting no buyer has yet acquired it, which signals an active sale of a large institutional dataset. Harvard is a high-value research university, so exposed records could include student, staff and research information of significant sensitivity. Academic and research institutions should treat this as a targeting signal and watch for downstream credential and data abuse.LeakPriority 48
Base de datos de Azerbaijan Airlines (azal.az) a la ventaA seller on BreachForums is offering a database allegedly from Azerbaijan Airlines (azal.az) that includes passenger records and upcoming flight details. Airline passenger data enables targeted phishing, loyalty-account takeover, and social-engineering of travelers. The airline and regional aviation authorities should verify the breach and alert affected passengers.LeakPriority 56
Filtración de 30 millones de datos de Dukcapil de IndonesiaA user posted on DarkForums offering what is claimed to be 30 million records from Dukcapil, Indonesia's civil registration agency responsible for population and ID data. Such records include national ID, family and address details that fuel identity fraud and account takeover across financial and government services. Indonesian authorities and banks should validate the claim and watch for KYC-bypass attempts.LeakPriority 62
100 GB de datos KYC de Transak a la venta en un foroA user calling themselves oxrock posted on DarkForums claiming to leak 100 GB of KYC documents belonging to Transak, a global crypto on/off-ramp provider. KYC files typically contain identity documents, selfies and proof of address, creating high identity-theft and account-takeover risk for users. Financial and crypto platforms should monitor for downstream misuse of the exposed identities.LeakPriority 85
Filtración de base de datos de la Alcaldía de Bolívar, ColombiaAn actor posted on DarkForums a database allegedly belonging to the Alcaldía Municipal de Bolívar, a municipal government in Valle del Cauca, Colombia, exposing citizen and administrative records. Leaks of public entities like this enable identity fraud, targeted phishing against public officials, and further intrusions. Colombian public bodies and the regional CERT should verify the scope immediately.LeakPriority 50
Venta de base de datos de la plataforma española Megacursos (100K)Seller Richard2002 is offering a database advertised as ~100,000 records from megacursos.com, a Spanish online-courses platform, on the DarkForums marketplace. The listing indicates a real organization's user data is being monetized, exposing potentially names, emails and credentials of students and customers. Such data fuels credential stuffing and targeted phishing against Spanish-speaking users.