BRIEFLeakhighP68
Database of ~536k Fastweb (Italy) customers for sale
Fastweb
Detected6 November 2026 · 21:43 UTC
Reposts collapsed2
A seller on BreachForums is offering roughly 536,000 records of Fastweb customers, an Italian ISP, including emails, phones, addresses and birth dates. ISP customer data is sensitive for identity fraud and SIM-swap or phishing attacks, and Fastweb is a major telecom provider. The size and telecom-sector context make this a notable database sale.
CategoryLeak
Severityhigh
Priority score68
Detected6 November 2026 · 21:43 UTC
LeakPriority 58
Base de datos médica del personal sanitario de EE. UU. a la ventaA BreachForums actor claims to be selling a medical database covering healthcare personnel across the United States with full details. If authentic, the dataset would expose sensitive personal and professional records of medical workers at national scale. Such data fuels identity theft, credential stuffing and targeted fraud against healthcare organizations.LeakPriority 52
Base de datos de la Universidad de Camarines Norte (Filipinas) filtradaA thread on BreachForums advertises the database of the University of Camarines Norte in the Philippines, tagged as a 2026 breach. A university database typically contains student and staff personal records, contact details and enrollment data, which enable identity theft and targeted phishing against the institution. Affected individuals and the university should treat the data as compromised.LeakPriority 58
Filtración de la base de datos de SplitVPN (NotVPN) con 23,4 millones de usuariosA dataset attributed to the VPN provider SplitVPN (NotVPN) is being circulated on the xReactor forum, reportedly covering 23.4 million user accounts, 58 million activity logs and 13.6 million device records. VPN subscriber data exposes identities, payment details and connection metadata, which attackers can use for account takeover, targeted phishing and deanonymization. Organizations relying on this or similar third-party VPN services should treat it as an exposure event.LeakPriority 55
Filtración de base de datos de la minorista Spencer's (EE. UU.)A database dump attributed to US retail chain Spencer's (spencers.com) was posted on BreachForums/DarkForums by actor scarlettgroup on 7 November 2026. As a national retail brand, Spencer's holds customer PII, loyalty and possibly transaction records, all attractive for fraud. The posting is fresh and the same data is being re-shared across forums quickly.LeakPriority 38
Base de datos de AU Small Finance Bank (India) a la ventaThe Darkpro carding forum advertises a database attributed to AU Small Finance Bank, an Indian scheduled commercial bank, with no stated record count or date. If authentic, customer or KYC data of a regulated bank is circulating, enabling fraud and targeted phishing against account holders. Scale and authenticity are unverified, so this is a low-confidence lead worth monitoring.LeakPriority 42
Filtración de base de datos de la estatal PT Surveyor IndonesiaThe actor 'Sophia' posted on DarkForums an alleged ~12,000-record dump of E-Pengadaan, the e-procurement platform of PT Surveyor Indonesia, a state-owned inspection firm. Procurement data exposes supplier contacts, contracts and staff emails usable for targeted phishing. Scale is modest and the date is unconfirmed, so it is a watch item rather than an alert.