BRIEFLeaklowP38
Source code and internal CRM leak of Lacoste
Lacoste
Detected14 September 2026 · 03:12 UTC
A leak labeled 'Lacoste.com Leak 2026' advertises source code plus internal documents and CRM data, dated mid-2026. Source-code and CRM exposure can reveal internal systems, customer records and logic useful for follow-on attacks. It is not a LatAm target and the post is months old, so it is not a fresh alert but remains relevant context.
CategoryLeak
Severitylow
Priority score38
Detected14 September 2026 · 03:12 UTC
Leak● 24
Filtración de datos de 2,8 millones de residentes del Kurdistán iraquíA thread advertises a dataset of roughly 2.8 million records tied to northern Iraq/Kurdistan, likely a regional population or citizen database. Large PII sets enable identity fraud and targeted attacks against the affected population. It is outside the AR-LatAm scope and appears in a long-running thread, so it is marginal for this feed.Leak● 32
A la venta base de datos del sistema de pagos Fast Payment System 2026A seller is advertising a 'Fast Payment System 2026 base', suggesting a payment-system database for sale, posted in mid-June 2026. Compromised payment data can drive fraud and account takeover across banks and merchants. The target and region are unclear and the listing is months old, so confidence and urgency are limited.Leak● 28
Filtración de 272.000 correos de usuarios de LedgerA forum post offers roughly 272,000 Ledger user email addresses, dated early January 2026. Such data fuels phishing and crypto-theft campaigns targeting hardware-wallet owners. It is several months old and an email list rather than fresh access, so it is low priority now.Leak● 82
Base de datos de 200.000 clientes de IntegraEnergia (España) a la ventaA seller is offering a fresh database of 200,000 customer records from IntegraEnergia, a Spanish energy provider, posted just minutes ago. Energy firms are critical infrastructure, so exposed customer PII enables targeted phishing, vishing and account fraud, and may aid further intrusion. Defenders should expect credential-stuffing and impersonation campaigns against these individuals.Leak● 35
Filtración de 29.800 licencias de conducirA forum user posted a set of roughly 29,800 driver's license records, a sensitive PII package useful for identity fraud and KYC bypass. The thread is dated July 2025, so it is not a fresh alert, and the source jurisdiction is unclear. It is included at low priority as a large PII corpus rather than a time-sensitive event.Leak● 50
Filtración de la base de datos de Free.fr con 19 millones de registrosA large database of roughly 19 million records attributed to the French ISP Free (free.fr) is being circulated in an underground forum thread. It affects subscriber/customer data of a major telecom operator, which is critical infrastructure and a frequent target for downstream fraud and phishing. The thread appears long-running, so the leak is likely not fresh, but the scale keeps it relevant for exposure monitoring.