BRIEFLeaklowP28
Database leak of the Double Counter service
Double Counter
Detected12 October 2026 · 08:53 UTC
A fresh database leak titled 'Double Counter leak' was posted on DarkForums by a staff account, targeting the Double Counter Discord verification bot. Details of scale and data fields are not yet visible, and the affected service is not government or critical infrastructure. It is worth only peripheral tracking for Discord-community exposure.
CategoryLeak
Severitylow
Priority score28
Detected12 October 2026 · 08:53 UTC
Leak● 45
Venta de expedientes VIP de clientes de Pathao (Bangladesh)A seller advertises 'Pathao VIP Dossiers' with proof of access, referring to the major South Asian ride-hailing and fintech platform. This points to a real breach of passenger or customer records rather than marketing noise. It matters for fintech fraud and identity-theft monitoring across the region.Leak● 68
Base de datos de 88 millones de registros de EE. UU. a la ventaA forum user posted today a 'full info' database of 88 million US records in the premium section. The scale and same-day recency point to a fresh, monetizable dump rather than recycled data. US defenders should check whether their user or customer data is included and monitor for resale.Leak● 46
Filtración de 92.000 registros de Yale University PressA 92,000-record database belonging to Yale University Press (yalebooks.yale.edu) has been posted on BreachForums with a public download link. It exposes the personal and likely credential data of the press's customer base. Although outside the AR-LATAM region, it is a named real organization and useful for credential-stuffing and phishing monitoring against educational-sector accounts.Leak● 35
Volcado de registros de 10,3 GB de White Cloud (9 de octubre)A fresh 10.3 GB stealer-log dump labelled 'White Cloud' was posted on Oct 9, containing large volumes of credential and session data from victim machines. While no single named organization is identified, the size means corporate and government credentials are likely mixed in. Defenders should feed these logs into credential-monitoring to catch reused passwords.Leak● 50
Filtración de datos de apuestas de Bahigo (Turquía)A newly posted thread (about 47 minutes old) shares customer and betting data from Turkish betting site Bahigo.com. Such datasets carry PII and payment/identity details that are directly usable for account takeover and fraud. Regional iGaming, payment-fraud and abuse teams should flag the exposed accounts for monitoring and forced resets.Leak● 52
Filtración de base de datos de apuestas de Elexbet (Turquía)A fresh post (about 49 minutes old) offers the customer/betting database of Turkish bookmaker Elexbet.com. Betting dumps typically contain names, emails, phone numbers and identity/payment data, which fuel fraud, KYC bypass and credential-stuffing. Fraud and iGaming defenders should treat the affected accounts and shared credentials as compromised.