BRIEFLeakhighP55
Free leak of a French database with 3.6 million records
Detected30 September 2026 · 14:35 UTC
Reposts collapsed3
A 3.6 million-record French database was published for free on RaidForums on 2026-08-28, indicating a broad set of personal records from an unspecified French source. Although the victim is outside Latin America, the size and freshness make it a candidate for credential-stuffing and identity-fraud campaigns against European users and services. Defenders should watch for reuse of these identities across authentication systems.
CategoryLeak
Severityhigh
Priority score55
Detected30 September 2026 · 14:35 UTC
Leak● 76
Filtración masiva de 180 millones de credenciales (URL:login:password)A stealer-log dump of roughly 180 million URL:login:password entries was published today, labeled private and freshly checked (30/09/2026). Credentials at this scale fuel credential stuffing and account takeover across many sectors and regions. Defenders should hunt for matches and enforce password resets and MFA where hits occur.Leak● 58
Filtración de la base de datos de la universidad UTEL de MéxicoA database allegedly belonging to UTEL, a Mexican online university, was posted for free today by a forum account with almost no details on size or contents. Latin American educational institutions hold student, staff and sometimes payment data, making such leaks valuable for phishing and fraud. Confirm the scope, then push student and staff credential resets.Leak● 40
Base de datos de 310.000 registros de gtptabs.com a la ventaA 310,000-record database attributed to gtptabs.com is being offered on a leak forum. The size suggests a real customer or user base that could be abused for spam, credential stuffing and fraud. The post is several months old, so treat it as background context rather than a fresh alert.Leak● 44
Base de 1,5 millones de leads de Binance a la ventaA seller is listing 1.5 million Binance-related leads dated 2026, likely contact and account data usable for targeted crypto phishing and fraud. Even partial validity enables convincing scams against exchange customers. It appears to be a marketing/leads set rather than a confirmed core breach, so priority is moderate.Leak● 58
Venta de datos financieros de 373.000 clientes de HamroPay (Nepal)A seller is offering identity and financial data on 373,000 natural persons allegedly from Nepal's HamroPay/Hamropatro platform. The records reportedly include personal identity and payment details, raising risks of account takeover and financial fraud. Financial-sector defenders should treat it as a fresh leak until disproven.Leak● 48
Contactos de la Asamblea Nacional de Francia filtradosA dataset of contact information for members of the French National Assembly is circulating on a RaidForums mirror. Exposing lawmakers' phone numbers, emails and addresses enables targeted phishing and harassment. The listing looks like an older reupload, so urgency is moderate rather than acute.