BRIEFLeakhighP55
Free leak of a French database with 3.6 million records
Detected30 September 2026 · 14:35 UTC
Reposts collapsed3
A 3.6 million-record French database was published for free on RaidForums on 2026-08-28, indicating a broad set of personal records from an unspecified French source. Although the victim is outside Latin America, the size and freshness make it a candidate for credential-stuffing and identity-fraud campaigns against European users and services. Defenders should watch for reuse of these identities across authentication systems.
CategoryLeak
Severityhigh
Priority score55
Detected30 September 2026 · 14:35 UTC
LeakPriority 62
Filtración de datos de empleados y nómina de la MMDAEmployee PII and payroll data of the Metropolitan Manila Development Authority (MMDA) has been leaked on DarkNetArmy Forums by the actor SUB-ZER0. Payroll records typically expose names, salaries, tax identifiers and bank details of civil servants, creating high risk of identity fraud and social engineering. Philippine government agencies should warn affected staff.LeakPriority 58
Base de datos del portal gubernamental pnc.gov.pt filtradaA database belonging to pnc.gov.pt, a Portuguese government initiative promoting film education, has been posted on DarkNetArmy Forums by the actor SUB-ZER0. Government portal records can expose registered users and personal data, enabling phishing and fraud. Portuguese public-sector defenders should assess the portal's user data exposure.LeakPriority 70
Filtración de 15.000 usuarios válidos de Caixa.gov.brA list of 15,000 valid, checked usernames for caixa.gov.br — Caixa Econômica Federal, a major Brazilian state-owned bank — circulates on LeakForum. Valid usernames enable credential stuffing, targeted phishing and account enumeration against critical banking infrastructure. The bank and its customers should treat this as an active exposure.LeakPriority 46
Publicación de 6,7 GB de logs de infostealer recientesA 6.7 GB batch of fresh infostealer logs dated 14 November 2026 is circulating across multiple forums including DarkForums, NulledBB and Niflheim. These logs typically contain corporate and personal credentials, session cookies and browser data. Defenders should assume credential exposure and hunt for valid-account abuse across their environment.LeakPriority 50
Base de datos de empleados de eTeam Inc. a la ventaA 2026 database of employees of eTeam Inc., a US staffing firm, is listed for sale on DarkForums by user Torax2020 on 14 November 2026. Staffing companies hold identity, payroll and client-placement data useful for business email compromise and recruitment-themed phishing. Affected employees and client organizations should be aware.LeakPriority 58
Base de datos de empleados de la teleco Momentum Telecom filtradaA 2026 database attributed to Momentum Telecom, a US telecommunications provider, is being offered on DarkForums. Telecom subscriber and employee data increases the risk of SIM-swap, account takeover and targeted phishing. Telecom infrastructure and its customer base are high-value targets for disruption.