BRIEFLeakhighP52
Drupal.org database leak with 1.75 million records
Drupal.org
Detected8 October 2026 · 09:07 UTC
A 1.75 million-line dump attributed to Drupal.org — including full names, email addresses and phone numbers — is being offered for download on the Spear Leaks forum. The data enables credential stuffing and targeted phishing against the Drupal developer and site-maintainer community. Defenders should monitor for reused passwords and phishing aimed at maintainer accounts.
CategoryLeak
Severityhigh
Priority score52
Detected8 October 2026 · 09:07 UTC
Leak● 42
Base de datos de COVID de Brasil (2021-2023) republicada en un foroA database labelled as Brazilian COVID data covering 2021-2023 is being re-posted in a darkweb marketplace. It concerns health-related personal data, a sensitive category under Brazil's LGPD, although the underlying records are several years old. Brazilian health authorities and partners should verify exposure and assess notification duties.Leak● 46
Filtración de 2.500 registros de infostealer de equipos Windows en MéxicoAn Aurora infostealer log pack covering roughly 2,500 compromised Windows 10 Enterprise machines in Mexico is being shared for free. Such logs typically contain browser credentials, cookies and session tokens that enable account takeover and lateral movement. Mexican organizations should hunt for exposed corporate credentials and reset affected accounts.Leak● 56
Venta de archivos sensibles de KPMG con muestra gratuitaA threat actor is posting a free sample of allegedly sensitive internal KPMG documents to advertise a larger paid sale. KPMG is a global audit and consulting firm whose internal files can include confidential client and public-sector engagements. Client organizations and KPMG itself should watch for follow-on phishing, extortion or data-driven attacks.Leak● 58
Base de datos de 2 millones de números de Seguro Social de EE.UU. a la ventaA freshly posted DarkForums thread is sharing a database described as 2 million US citizen SSN records with additional personal details. SSNs and identity data enable large-scale synthetic-identity fraud, loan and tax fraud, and account takeover. US defenders and fraud teams should monitor for downstream credential and financial abuse.Leak● 68
Base de datos de 20 millones de ciudadanos españoles con datos financieros a la ventaA seller on DarkForums is advertising a 20-million-record database of Spanish citizens that reportedly includes financial data. Such a dataset fuels identity theft, targeted phishing with accurate personal details, and fraud against banking customers. Spanish banks and public bodies should treat it as a fresh PII and financial-exposure risk and prepare customer notifications.Leak● 32
Base de datos de Zynga filtrada y disponible para descargaA database attributed to gaming company Zynga is circulating for download, exposing player account and personal data. No post date is shown and it may overlap with earlier Zynga breaches, so confidence is low and it is not a fresh alert. Affected users still face credential-stuffing and phishing risk if the records are valid.