TripWorks booking platform data breach leaked

TripWorks

Detected29 October 2026 · 15:24 UTC

Reposts collapsed2

Why it matters

A DarkForums thread provides a downloadable leak attributed to TripWorks, a travel and tour booking platform, with the discussion spanning 13 pages indicating ongoing interest. Booking platforms hold customer contact, payment and itinerary data useful for fraud and phishing. The exact date is unclear, so defenders should confirm authenticity and recency before acting.

MetadataRECORD

CategoryLeak

Severityhigh

Priority score55

Detected29 October 2026 · 15:24 UTC

Related items6

Leak● 47

Filtración de datos del bufete Becker & PoliakoffA freshly posted thread on the Spear Leaks forum (spear.cx) advertises a data breach at Becker & Poliakoff, a US law firm with over 170 lawyers, published within the last hour on 29 October 2026. Law firms hold privileged client information and confidential case material, making leaks especially sensitive. The exposure could enable targeted phishing and extortion against clients and staff.

21m

Leak● 57

Base de datos de la brasileña Dripay a la venta en DarkForumsA seller using the alias 'samleego' listed a purported database belonging to Brazilian payments company Dripay for sale on DarkForums on 29 October 2026. The post advertises stolen records from a Latin American financial-services firm, a sector carrying high fraud and account-takeover risk. If genuine, exposed customer data could fuel payment fraud across Brazil and neighbouring markets.

21m

Leak● 62

Filtración de base de datos de Acadian Ambulance Services (600.000 registros)A user 'Torax2020' posted a 600,000-record database attributed to US emergency medical provider Acadian Ambulance Services on DarkForums on 29 October 2026. EMS providers hold sensitive patient and personnel data, making this a high-impact healthcare-sector leak. If authentic, exposed medical and identity data could enable fraud against patients and staff and should be triaged quickly.

21m

Leak● 48

Dump de 27,1M de registros URL:LOG:PASS en DarkForumsA 27.1 million-record URL:LOG:PASS stealer-log dataset labeled 'PRIVATE UHQ' was posted on 29 October 2026 and mirrored across several forums by the cloudmarket/D4rkNetHub actor. It aggregates credentials and browsing URLs harvested from infostealer infections, so it likely contains corporate SaaS, VPN and email logins. Organizations should assume some employee credentials may be present and hunt for password reuse and credential-stuffing risk.

Leak● 38

Base de datos de 1,8 millones de ciudadanos mexicanos (2023)A file labelled as a 1.8 million-record Mexican citizen database, dated 2023, was reposted to DarkForums on 29 October 2026. It likely contains personal identifiers such as names, IDs and contact data useful for identity fraud and phishing against Mexican residents. The data is old, making this a background exposure item rather than a fresh breach.

Leak● 40

Base de datos del dominio bdv.fr publicada en DarkForumsA database tied to the domain bdv.fr was posted to the DarkForums databases section on 29 October 2026, with the size and record count not shown in the visible text. Because 'bdv' matches well-known banking brands, the leak should be triaged quickly to determine whether it involves a financial institution. Content and scope remain unconfirmed.