BRIEFLeaklowP38
Menulux data breach leaked for download
Menulux
Detected29 September 2026 · 18:07 UTC
A full database for Menulux was posted for download on DarkForums under the 'DATABASE' leak section, with several follow-up pages suggesting a sizeable breach. Customer PII is now circulating and could feed downstream fraud. The post dates to January 2026, so it is a stale leak rather than a fresh alert.
CategoryLeak
Severitylow
Priority score38
Detected29 September 2026 · 18:07 UTC
Leak● 44
Base de datos de CoinTracker.io a la ventaA seller on DarkForums is offering the Crypto cointracker.io database for sale. CoinTracker is a U.S. crypto tax and portfolio platform, so records likely include identities, wallet and tax data — highly valuable for fraud and targeted phishing. Crypto users' tax data is sensitive; monitor for reuse in account takeover.Leak● 50
Filtración de datos de Rentomojo (India), 500.000 registrosRentomojo.com, an Indian furniture and appliance rental platform, allegedly had 500,000+ customer records leaked. The exposure includes subscriber personal data, enabling identity theft and targeted phishing. Though outside LatAm, large consumer databases like this fuel credential stuffing against financial and retail services.Leak● 48
Filtración de base de datos de la firma Morgan Records ManagementActor V0idix on DarkForums is offering a database belonging to Morgan Records Management, a US firm that handles medical and business records. Exposed patient and client PII can fuel identity theft and targeted phishing. Defenders tied to this vendor or its clients should treat shared credentials as compromised and monitor for reuse.Leak● 60
Filtrados datos internos de la química alemana Lanxess (14k usuarios)An actor is leaking 'Lanxess Internal Data' covering roughly 14,000 users of the German specialty-chemicals group Lanxess, posted September 20, 2026. Internal employee records of a major manufacturer enable targeted social engineering and, in this sector, critical-infrastructure exposure. Treat exposed accounts as compromised.Leak● 32
Filtración de datos de 17Media (17.live) con 28 millones de registrosA forum post offers a leaked dataset from the 17Media/17.live live-streaming platform containing roughly 28 million records. While the scale is large and could fuel account-takeover and extortion, the post is dated March 2026 and is therefore roughly six months stale, not a fresh alert. It is worth tracking for contextual exposure and downstream credential abuse but is low priority right now.Leak● 72
Filtración de base de datos de Transfast/Mastercard con 11 millones de registrosA threat actor is advertising a Transfast/Mastercard data breach of roughly 11 million records, freshly posted to a dark web forum. The dataset reportedly contains payment-transfer customer data, which enables card fraud, account takeover and targeted phishing against banks and fintechs. Financial-sector defenders should verify exposure and monitor for downstream fraud.