BRIEFLeakhighP64
MyComplianceOffice breach exposes major firms' confidential comms
MyComplianceOffice
Detected28 September 2026 · 09:48 UTC
A supposedly fresh breach of MyComplianceOffice, a compliance-software platform used by regulated firms globally, is being advertised on DarkForums with confidential communications exposed. If legitimate, it exposes sensitive internal/corporate communications and potentially names of client organisations. Defenders at firms using this platform should hunt for related credential reuse and monitor for follow-on social engineering.
CategoryLeak
Severityhigh
Priority score64
Detected28 September 2026 · 09:48 UTC
LeakPriority 53
Filtración del sistema SYRIF del Banco Central de GuineaA DarkForums thread advertises data allegedly from the SYRIF system of the Central Bank of the Republic of Guinea (BCRG), a core financial infrastructure component. If genuine, exposure of central bank systems is high impact for the country's financial sector and payment flows. The post date is unclear, so authenticity and freshness must be verified before acting.LeakPriority 60
Filtración de datos de la aseguradora Ahorra SegurosA threat actor using the handle 'blasphemus' published on DarkForums a database reportedly belonging to Ahorra Seguros containing roughly 25,000 records, dated November 2026. The leak exposes customer data of a Spanish-speaking insurance company and could fuel fraud and targeted phishing. Treat affected customers' personal data and credentials as compromised.LeakPriority 40
Base de datos del dominio gubernamental francés osmose.numerique.gouv.fr filtradaA RaidForums thread offers for free a database apparently tied to the French government domain osmose.numerique.gouv.fr, a .gouv.fr service. If current, exposure of public-sector records is significant for French government defenders. The thread appears to originate from older RaidForums activity, so treat it as likely stale but verify scope and recency.LeakPriority 46
Venta de datos de FENIE Energía, del sector eléctrico españolSeller 'Leadstock' is offering data belonging to FENIE Energía, a Spanish electricity-sector entity, in the DarkForums marketplace. Energy-sector data is sensitive given its link to critical infrastructure and can enable fraud or targeted outreach to industry firms. Verify the authenticity and scope of the offered dataset.LeakPriority 52
Base de datos de Xiaomi China publicada en foro de hackingThreat actor 'Myra' posted a Xiaomi China database on SpyHackerz on October 30, 2026, including CSV files of service orders and related operational records. Exposure of a major electronics vendor's internal data can fuel phishing, warranty fraud and account takeover. Verify scope and monitor for reuse of the leaked records.LeakPriority 44
12 millones de credenciales de romwe.com circulan en xReactorA 12-million-record email:password dataset for romwe.com, an online fashion retailer, is being circulated on the xReactor forums. Such volumes of credentials enable credential stuffing against the retailer and reuse attacks on linked accounts. Users should reset passwords and enable MFA, and the company should hunt for account takeovers.