BRIEFLeakhighP70
TSMC employee personal data leaked on DarkForums
TSMC (Taiwan Semiconductor Manufacturing Company)
Detected8 November 2026 · 14:43 UTC
A DarkForums actor posted a claimed leak of TSMC employee personal information from the Taiwanese semiconductor giant. Although only staff records appear involved, TSMC is strategic critical infrastructure and its workforce data can fuel targeted phishing and insider-oriented attacks. Semiconductor and supply-chain defenders should review exposure and monitor for credential abuse.
CategoryLeak
Severityhigh
Priority score70
Detected8 November 2026 · 14:43 UTC
LeakPriority 62
Acceso admin a allpay.com.tw con 663.000 registros de clientesAn actor on DarkForums claims full administrative access to a Zoho CRM instance belonging to allpay.com.tw, a Taiwanese payment provider, along with roughly 663,000 customer PII records. Payment-gateway customer data is a high-value base for phishing, SIM-swap and downstream account takeover against merchants. Compromise of the CRM tenant also risks tampering with merchant onboarding and settlement details.LeakPriority 68
Venta de acceso admin a datos de Santander Consumer Alemania (419.000 registros)A DarkForums post offers full administrative access to a Salesforce Sales Cloud instance at santanderconsumer.de together with roughly 419,000 customer records. The data set covers consumer-finance customers of a major European bank brand, exposing personal and contract details valuable for fraud and targeted phishing. Admin-level CRM access also allows data exfiltration and manipulation of customer records.LeakPriority 72
Acceso admin a itsme.be con 412.000 registros de identidad KYCA DarkForums listing claims full administrative access to a Jumio KYC portal associated with itsme.be, the Belgian digital identity app used for government and banking logins, along with roughly 412,000 identity records. Identity-verification data of this kind enables account takeover, synthetic identity fraud and bypass of eIDAS-style onboarding controls. Any Belgian bank, insurer or public service relying on itsme should treat the exposure as a credential and trust-chain risk.LeakPriority 78
Filtración de 892.000 registros de Antena Sur Comunicaciones (Personal)A DarkForums actor is advertising full WooCommerce administrator access plus roughly 892,000 customer and order records tied to Antena Sur Comunicaciones S.R.L., a dealer/reseller of the Argentine telecom operator Personal. The dump exposes names, contact data and purchase history of telecom customers, a sector classified as critical infrastructure in Argentina. Whoever holds admin access can also tamper with the store, inject skimming code or pivot toward related infrastructure.LeakPriority 40
Filtración de la base de datos de MyFitnessPal publicada en BreachForumsA BreachForums thread shares a MyFitnessPal_BF.7z database archive for the fitness app. The content likely overlaps the well-known 2018 MyFitnessPal breach of over 140 million accounts, so it is probably a re-release rather than a new compromise. Still useful for credential-stuffing checks against users of the service.LeakPriority 48
Base de 30 millones de contactos de ZoomInfo a la ventaA seller on NulledBB advertises 30 million fresh business leads attributed to ZoomInfo, the business-data platform. The dataset is huge and likely scraped or leaked customer/contact records usable for targeted B2B phishing and social engineering. Organizations in the exposed pipeline should expect credential-phishing attempts referencing their staff data.