BRIEFLeakhighP46
Serbian government email addresses leaked on DarkForums
Government of Serbia
Detected30 October 2026 · 13:24 UTC
A DarkForums thread by Mylrotul advertises leaked Serbian government email addresses, a targeting list for credential phishing against public administration. Official address lists let attackers craft convincing lures referencing ministries and agencies, and pair with previously leaked passwords. Volume and source are unstated, so validation against known government domains is needed.
CategoryLeak
Severityhigh
Priority score46
Detected30 October 2026 · 13:24 UTC
Leak● 41
Base de datos de 120.000 compradores de oro de Goldunion (Francia)A DarkForums thread posted on 30 October offers a 120,000-record database from goldunion.fr, a French precious-metals dealer, marketed as premium high-value data. Precious-metal customer records usually carry identity, address and purchase or holdings details. That mix is attractive for targeted fraud, burglary reconnaissance and social engineering against affluent customers.Leak● 46
Filtración de base de datos del NHS británico con 31.000 registrosOn 30 October a DarkForums post advertised a 31,000-record leak attributed to the UK National Health Service. The record count is modest and no sample is shown, but health-sector data is sensitive and commonly reused for medical fraud, insurance abuse and convincing phishing against staff and patients. Even a partial NHS dataset carries regulatory and reputational weight.Leak● 52
Base de datos del gobierno de Sudáfrica publicada en DarkForumsA thread titled 'South African Government Database' was posted on DarkForums on 30 October. No record count or sample is shown, so authenticity is unconfirmed, but genuine public-sector dumps typically contain staff contacts, national ID numbers and portal credentials. Those enable targeted phishing and identity fraud against government employees and citizens they serve.Leak● 55
Filtración de 200.000 clientes de Getir y BiTaksi en TurquíaOn 30 October a DarkForums thread announced a fresh 200,000-record customer dump from Getir, the Turkish rapid-delivery unicorn, and BiTaksi, its ride-hailing arm. Customer datasets of this kind usually carry names, phone numbers, e-mail addresses and address or trip metadata. That supports highly convincing phishing and smishing against Turkish consumers, and it can be cross-referenced with food-delivery and mobility accounts.Leak● 56
1,5 millones de credenciales de policía y gobierno de Bangladesh filtradasA 'URL & PASS police gov bd' set of roughly 1.5 million lines was posted on DarkForums on 30 October, targeting Bangladeshi police and government web portals. Bulk credential dumps of public-sector portals enable account takeover of official mailboxes and administrative panels. Attackers can use them for document theft, impersonation and follow-on intrusion into ministry systems.Leak● 58
Filtración de la base de datos del marketplace turco sahibinden.comOn 30 October a thread on DarkForums advertised a database leak from sahibinden.com, Turkey's largest classifieds marketplace with tens of millions of users. The post does not disclose the record count, but user data from such a platform typically includes names, phone numbers, e-mail addresses and listing history. It is a strong base for targeted phishing and account-takeover attempts against Turkish consumers and businesses.