BRIEFLeakhighP58
EscapadaRural user database leak affects 2.9 million accounts
EscapadaRural.com
Detected31 October 2026 · 00:24 UTC
A DarkForums thread by user Argnitir, posted in late October 2026, offers a 2.9 million user database from EscapadaRural, a Spanish rural-tourism booking platform. The set likely includes emails, names and booking-related data usable for credential stuffing and targeted phishing against Spanish consumers and rural accommodation owners. Spain is a frequent target for Spanish-language phishing, so the data has immediate resale value.
CategoryLeak
Severityhigh
Priority score58
Detected31 October 2026 · 00:24 UTC
Leak● 45
Reposición activa del enlace de la filtración de Serasa Experian BrasilA DarkForums user (Quindanos) re-shared a working download link to the well-known Serasa Experian Brazil credit-bureau breach, one of the largest consumer-data leaks in Latin America. The data itself is old, but active links extend circulation and expose Brazilian consumers and businesses to fraud and account abuse. Given the staleness, this is a reminder rather than a fresh breach.Leak● 55
Base de datos de 2 millones de usuarios de Cultura.com a la ventaA 2 million record database attributed to Cultura.com, a French retailer, was posted on DarkForums by user Ixzozar under the [FR] tag. The dump likely contains customer account and contact data usable for phishing and account takeover. French customers of the retailer are at risk.Leak● 58
Filtración de la base de datos del Ministerio de Educación de MarruecosA database from Morocco's Ministry of Education was posted on DarkForums by user Silmidar under the database-leaks section. Education-ministry data typically includes staff, student and contact records useful for targeted phishing and account takeover. A public-sector victim should treat the leak as confirmed until disproven.Leak● 60
Base de datos de la agencia estatal de personal BKN de Indonesia filtradaA database belonging to Badan Kepegawaian Negara (BKN), Indonesia's national civil service agency, was posted on DarkForums by user Silmidar. Such dumps typically contain employee records and identity data of government staff. Exposure of civil-servant data enables targeted phishing and identity fraud against a government institution.Leak● 68
Filtración de base de datos de 2,9 millones de usuarios de EscapadaRuralA 2.9 million record user database from EscapadaRural.com, a Spanish rural-tourism booking platform, was posted for download on DarkForums by user Ylonmigor. The dump likely contains names, emails, hashed passwords and booking details of Spanish users. It enables credential stuffing and phishing against a real travel-sector company in Spain.Leak● 44
Datos de empleados de Bangkok Airways publicados en foroA DarkForums post from October 30, 2026 claims to publish Bangkok Airways employee information and additional data. Airline staff directories are commonly reused for travel-sector phishing, invoice fraud and credential attacks against corporate booking systems. The listing gives no record count, so scale is unknown and the claim needs validation.