BRIEFLeakhighP60
Data leak of Polish water utility MPWiK Mysłowice
MPWiK Mysłowice
Detected1 October 2026 · 13:36 UTC
A leaked database belonging to MPWiK Mysłowice, the Polish municipal water utility, is being shared on a leak marketplace. Because water utilities are critical infrastructure, exposed customer and billing records can fuel phishing, invoice fraud and follow-on intrusion attempts. Water-sector defenders should treat this as a live credential and supply-chain risk.
CategoryLeak
Severityhigh
Priority score60
Detected1 October 2026 · 13:36 UTC
Leak● 72
Base de datos de Cisco Systems ofrecida en foroA freshly created thread advertises a database attributed to Cisco Systems Inc, posted a minute ago on a major leak forum. Cisco is a high-value, globally embedded vendor whose data exposure can enable supply-chain and customer targeting. The claim needs triage to confirm scope and authenticity before it spreads.Leak● 42
Filtración de 5 millones de registros de la telefónica SFRA five-million-record database attributed to SFR, a major French telecom operator, is circulating on a leak forum. Telecom breaches expose subscriber identities, billing and traffic data that enable SIM-swap, phishing and account takeover. The thread appears long-running, so verify freshness before alerting as new.Leak● 48
Base de datos de empresas francesas de 5,3 millones de registros a la ventaA threat actor is selling a French business database advertised as 5.3 million records from 2026 on BreachForums. Business contact data at this scale fuels targeted B2B phishing, invoice fraud and social engineering. It sits outside the LATAM priority region but is a large, fresh commercial leak worth tracking.Leak● 58
Base de datos de clientes de Digitec Galaxus (Suiza) a la ventaA seller is offering customer data of Digitec Galaxus, one of Switzerland's largest online retailers, in a post dated 27-09-26. Although outside Latin America, it is a fresh, named-organization leak that can enable phishing and account takeover against the retailer's customers and partners. Defenders with Swiss exposure should monitor and validate it.Leak● 28
Presunta filtración de 200 millones de cuentas de X/Twitter ofrecida a la ventaA forum post dated 31 October 2025 advertises a 200-million-record X/Twitter email:password dataset. The claim is nearly a year old and closely matches previously recycled Twitter leaks, so it is unlikely to be a fresh breach. Treat it as low priority unless credential-stuffing against X accounts tied to your organization is actually observed.Leak● 45
Filtración de 17 millones de credenciales URL:login:pass de stealer logsA 17-million-line URL:login:password combolist attributed to 'Secretline.top' stealer logs is being shared freely across several underground forums. It aggregates credentials harvested by infostealers rather than a single organization's data, so the impact is diffuse. Worth monitoring so your users' leaked credentials can be reset, but it is not a targeted breach of a named entity.