BRIEFLeakhighP58
Cellebrite and MSAB data leaked on underground forum
Cellebrite, MSAB
Detected28 October 2026 · 22:24 UTC
A thread posted on DarkForums on 26 October 2026 claims a leak affecting Cellebrite and MSAB, the two leading mobile forensic extraction vendors used by police and prosecutors worldwide. If genuine, exposed documentation or tooling details could help suspects detect, evade or attack forensic processes, and may reveal law-enforcement customers. Investigators relying on these platforms should treat the claim as credible until validated.
CategoryLeak
Severityhigh
Priority score58
Detected28 October 2026 · 22:24 UTC
Leak● 52
Base de datos de RedClinica y clínicas asociadas publicada gratisDarkForums user Synq1xxss posted a free release labeled 'RedClinica full 2026 & more clinics', a database tied to a clinic network and associated medical facilities. Healthcare data is highly sensitive, exposing patient and staff information usable for fraud and extortion. The exact organization and country are not confirmed, but the health-sector scope makes it worth triage.Leak● 42
Venta del volcado de 1,8 TB de la base de datos de Serasa (Brasil)A seller is advertising 1.8 TB of Brazilian credit-bureau data attributed to Serasa, with more than 260 million rows, across BreachForums, DarkForums and RaidForums mirrors. The material is explicitly dated 2024, so it is a recirculated or resold old dataset rather than a new breach. It still matters for Brazilian defenders because credit and identity data of that scale fuels loan fraud and account takeover for years.Leak● 55
Volcado completo de datos de paidwork.com a la ventaA full database dump of paidwork.com was posted on DarkForums on 28 October 2026 by the user Tanaka, indicating a freshly advertised breach. The record count is not visible in the snippet, but the framing as a complete "FullDump" suggests account and profile data for the whole user base. Affected users face credential-stuffing risk and follow-on fraud if emails and passwords are included.Leak● 66
ShinyHunters publica datos filtrados de AlconThe ShinyHunters group posted a leak of Alcon.com data on DarkForums on 28 October 2026, the same day the thread was discovered. Alcon is a major eye-care and surgical device manufacturer, so leaked corporate or customer data could support business email compromise and supply-chain targeting. The claim is fresh and from a high-profile actor, which raises confidence that real data is circulating.Leak● 72
Filtración de datos de las policías de Abu Dhabi y Dubái (EAU)On DarkForums, user Daxorpuzan published a leak attributed to Abu Dhabi and Dubai police on October 26, 2026. Police datasets typically expose officer names, internal contacts and operational details that enable targeted phishing and impersonation. Even outside Latin America, it is a fresh government leak worth tracking for cross-border links.Leak● 48
Venta de base de datos de hospitales, clínicas y médicos de EgiptoA seller offered a database covering Egyptian organizations, clinics, pharmacies, hospitals and doctors on RaidForums. Healthcare contact and identity data enables targeted phishing, insurance fraud and extortion against medical providers. The scale is unclear, so verify overlap with known leaked medical datasets before treating it as new.