BRIEFLeakhighP58
Data leak of broker AvaTrade affecting Spain
AvaTrade
Detected5 November 2026 · 12:24 UTC
A database tied to the online broker AvaTrade was posted on DarkForums by user Nympaxor on 5 Nov 2026. Because the target is a regulated financial services firm, exposed client identity and KYC data could enable account takeover, targeted phishing and fraud against investors. Defenders in Spanish-speaking finance should validate the dataset and warn customers to watch for credential-stuffing and impersonation.
CategoryLeak
Severityhigh
Priority score58
Detected5 November 2026 · 12:24 UTC
Leak● 64
Base de datos de Serasa Experian (Brasil) publicada con enlace de descargaA user on DarkForums (Olyndakron) has republished a Serasa Experian Brazil database with a working download link. Serasa is Brazil's largest credit bureau, so any dataset of consumer credit and identity records carries very high sensitivity. The content may be a re-post of an older breach, but given the scale and financial-sector impact it still warrants verification by Brazilian defenders.Leak● 78
Filtración de 3,6M de registros de negocios y transacciones de IziPay PerúA dataset advertised on DarkForums claims to contain 3.6M+ business and transaction records from IziPay, a Peruvian payment gateway. If genuine, this exposes merchant identities and payment/transaction metadata for a large share of Peru's card-accepting merchants. Payment-processor data is high-value for follow-on fraud and poses real risk to Peruvian financial-sector defenders.Leak● 44
Base de 6 millones de móviles alemanes con fecha de nacimientoDarkForums user Tazrozen posted 6 million German mobile numbers with dates of birth on 31 Oct 2026. This combination of identifiers enables SIM-swap, smishing and KYC bypass against real users. German telecoms and any service relying on SMS OTP for these subscribers should assess exposure and strengthen verification.Leak● 48
Filtración de 82 millones de direcciones de Yuantong ExpressAn 82-million-record set of addresses and customer data from Chinese courier Yuantong Express (yto.net.cn) was posted on DarkForums on 5 Nov 2026. Parcel data exposes home addresses, phones and purchase patterns, enabling fraud and physical-risk targeting. Chinese logistics firms and e-commerce customers should treat these records as compromised.Leak● 55
Filtración de 5 millones de clientes del ISP turco TurknetDarkForums user ReichLeaks posted a 5.05-million-customer dataset from Turkish ISP Turknet on 5 Nov 2026, tagged as a re-hack. Telecom subscriber data enables SIM-swap, targeted phishing and account takeover for millions of users. Turkish ISPs and Turknet customers should verify the claim and prepare credential and notification responses.Leak● 82
Filtración de 7 millones de datos de clientes de Santander MéxicoA 7-million-record Santander Mexico dump was re-shared on DarkForums on 5 Nov 2026 with a 'new link', meaning the data keeps circulating freely despite being an older leak. Banking PII at this scale fuels account takeover, phishing and card fraud across Mexico. The bank and its customers should assume the data is public.