BRIEFLeakhighP58
NodeFlux.io internal data leak exposes 6.58M events
NodeFlux.io
Detected23 October 2026 · 14:15 UTC
An actor is freely distributing what is claimed to be an enterprise dataset from NodeFlux.io with roughly 6.58 million internal events. If genuine, it exposes operational and user activity records of a named vendor, enabling credential reuse, customer targeting and social engineering. Defenders should hunt for NodeFlux-related credentials and watch for follow-on abuse of its clients.
CategoryLeak
Severityhigh
Priority score58
Detected23 October 2026 · 14:15 UTC
Leak● 42
Base de datos con 3.000 datos de empleados del banco BNZ a la ventaA dataset labeled 'BNZ' with roughly 3,000 staff names, phone numbers, emails, job titles and city locations is being offered on an underground forum. It affects employees of a major bank, exposing contact and organisational data useful for phishing and social engineering against financial staff. Small in scale, but bank insider-org data is a recurring precursor to targeted fraud.Leak● 22
Base de datos del Ministerio de Finanzas de Irak, filtrada en 2024A forum post references an alleged full breach of Iraq's Ministry of Finance database, explicitly dated 2024. It is a government financial dataset, but the claim is old, unsupported in the snippet and outside the Latin American scope, so there is no fresh exposure to act on. Useful only as background context if the data resurfaces in a resale or combo release.Leak● 25
Base de datos del Ministerio de Finanzas de Irak filtrada (2024)Multiple threads claim the full database of Iraq's Ministry of Finance was breached and circulated back in 2024. If authentic, it would be a serious government data compromise, but the material is dated 2024 and repeatedly reposted across forums. It is stale and outside the LatAm region, so it is low priority for current alerting.Leak● 58
Filtración de documentos financieros de la red del Líder iraníA newly registered user posted roughly 12.1MB of documents and images described as financial records of the network surrounding Iran's Supreme Leader. The volume is modest, but the material is politically sensitive and may be reused for disinformation, sanctions research or targeting of linked entities. Worth monitoring as a geopolitical leak rather than a technical intrusion against a Latin American asset.Leak● 52
Filtración de la base de datos de Phone House EspañaA forum thread advertises a downloadable database attributed to Phone House España, a major Spanish electronics and mobile retail chain. Retail customer databases typically carry names, contact details, addresses and purchase history, all directly usable for phishing and account-takeover against consumers in Spain. The exact record count and freshness are unconfirmed, so it should be validated before any notification effort.Leak● 72
Base de datos del Ejército de Pakistán a la venta en un foroA forum seller posted a listing titled 'Pakistan Army Fresh Database', claiming a recent exfiltration of data belonging to a national military institution. Military personnel and organisational records are highly sensitive as they enable targeted social engineering, identity fraud and recruitment-network mapping. Though outside Latin America, it is a fresh military-sector data sale worth tracking for regional military contacts and OSINT correlation.