BRIEFLeakhighP55
Indian Aadhar, HDFC and PhonePe database leak
India (Aadhar/HDFC/PhonePe)
Detected13 September 2026 · 10:12 UTC
A freshly posted thread advertises a combined dataset spanning India's Aadhar national ID, HDFC bank and PhonePe fintech records. Aadhar is the world's largest biometric identity system, so any genuine overlap with banking and payment data creates severe identity-theft and fraud risk for hundreds of millions. Details and proof are absent, so defenders should treat it as unverified but high-impact.
CategoryLeak
Severityhigh
Priority score55
Detected13 September 2026 · 10:12 UTC
Leak● 42
Venta del volcado de 1,8 TB de la base de datos de Serasa (Brasil)A seller is advertising 1.8 TB of Brazilian credit-bureau data attributed to Serasa, with more than 260 million rows, across BreachForums, DarkForums and RaidForums mirrors. The material is explicitly dated 2024, so it is a recirculated or resold old dataset rather than a new breach. It still matters for Brazilian defenders because credit and identity data of that scale fuels loan fraud and account takeover for years.Leak● 55
Volcado completo de datos de paidwork.com a la ventaA full database dump of paidwork.com was posted on DarkForums on 28 October 2026 by the user Tanaka, indicating a freshly advertised breach. The record count is not visible in the snippet, but the framing as a complete "FullDump" suggests account and profile data for the whole user base. Affected users face credential-stuffing risk and follow-on fraud if emails and passwords are included.Leak● 58
Filtración de datos de Cellebrite y MSAB en foro undergroundA thread posted on DarkForums on 26 October 2026 claims a leak affecting Cellebrite and MSAB, the two leading mobile forensic extraction vendors used by police and prosecutors worldwide. If genuine, exposed documentation or tooling details could help suspects detect, evade or attack forensic processes, and may reveal law-enforcement customers. Investigators relying on these platforms should treat the claim as credible until validated.Leak● 66
ShinyHunters publica datos filtrados de AlconThe ShinyHunters group posted a leak of Alcon.com data on DarkForums on 28 October 2026, the same day the thread was discovered. Alcon is a major eye-care and surgical device manufacturer, so leaked corporate or customer data could support business email compromise and supply-chain targeting. The claim is fresh and from a high-profile actor, which raises confidence that real data is circulating.Leak● 72
Filtración de datos de las policías de Abu Dhabi y Dubái (EAU)On DarkForums, user Daxorpuzan published a leak attributed to Abu Dhabi and Dubai police on October 26, 2026. Police datasets typically expose officer names, internal contacts and operational details that enable targeted phishing and impersonation. Even outside Latin America, it is a fresh government leak worth tracking for cross-border links.Leak● 48
Venta de base de datos de hospitales, clínicas y médicos de EgiptoA seller offered a database covering Egyptian organizations, clinics, pharmacies, hospitals and doctors on RaidForums. Healthcare contact and identity data enables targeted phishing, insurance fraud and extortion against medical providers. The scale is unclear, so verify overlap with known leaked medical datasets before treating it as new.