BRIEFLeakhighP52
Pathao data breach exposes 19M Bangladeshi users' personal data
Pathao
Detected6 October 2026 · 16:07 UTC
Reposts collapsed2
A threat actor claims a catastrophic breach of Pathao, the Bangladeshi ride-hailing and fintech super-app, exposing personal data of about 19 million users. The dataset contains identity and contact data that enable fraud and account takeover. This is a large, regionally significant leak worth monitoring.
CategoryLeak
Severityhigh
Priority score52
Detected6 October 2026 · 16:07 UTC
Leak● 58
Base de datos de plataforma deportiva de EE.UU. (8,2M filas) a la ventaA seller is offering roughly 8.2 million rows of user data from a US digital sports management platform, likely names, emails and credentials. Although the victim is US-based, the scale makes it valuable for credential-stuffing and phishing. Defenders should watch for reuse of these accounts across other services.Leak● 42
Base de datos de teléfonos de clientes de KuCoin a la ventaA threat actor is selling a database of KuCoin customer phone numbers. Phone data alone enables targeted SIM-swap, smishing and account-takeover attempts against crypto users. Exchange customers remain high-value targets for financial fraud, so this warrants awareness.Leak● 55
Ofrecen a la venta base de datos de Aadhaar con 1.800 millones de registrosSellers on DarkNetArmy advertise an Aadhaar dataset claiming 1.8 billion Indian resident records. Aadhaar is the world's largest biometric ID system, so any genuine exposure is extremely sensitive, though such offers are often recycled old data. Treat with caution but prioritize verification.Leak● 38
Datos personales nacionales de Australia a la ventaA BreachForums sale of Australian national personal data offers a large PII set usable for identity theft, fraud and targeted phishing. The post is dated March 2026 and is outside Latin America, so it is not a fresh alert, but it remains a sizeable real-population leak worth tracking. Verify scale and overlap with earlier Australian breach data.Leak● 50
Base de datos de Adobe de 13M registros (832GB) a la ventaA listing by UNC6783 (Mr. Raccoon) offers an alleged 13M-record, ~832GB Adobe dataset. If genuine or repackaged, a set this size fuels credential stuffing, phishing and account-takeover against enterprise users worldwide. Defenders should watch for reuse of corporate Adobe credentials and enforce resets where exposed.Leak● 46
Filtración de base de datos criminal de EE. UU. con 70 millones de registrosA database described as containing roughly 70 million US criminal records was posted for leak on the Spear/Leaks forum. If authentic, it exposes names and identifiers of individuals tied to the US justice system, fueling fraud, identity theft and doxxing. The post dates to 2026-03-28, so it is months old and not a fresh alert, but the scale keeps it relevant for monitoring.