BRIEFLeakhighP62
Data leak and defacement of Conalep Morelos
Conalep Morelos
Detected10 November 2026 · 01:43 UTC
A threat actor using the handle 'flaco' posted on DarkForums a database of roughly 24,000 records belonging to Conalep Morelos, a Mexican public technical-education institution under the SEP, alongside claims of website defacement. Exposure of student/staff personal data from a government education body raises risks of identity fraud and credential abuse. Defenders should treat it as a confirmed compromise of a public-sector entity and assess what personal data fields were included.
CategoryLeak
Severityhigh
Priority score62
Detected10 November 2026 · 01:43 UTC
LeakPriority 32
Venta de la base de datos del banco marroquí Al Barid BankA full database dump attributed to the Moroccan bank Al Barid Bank, dated 2025, is being offered on BreachForums, reportedly containing financial records and phone numbers. Although not recent, a bank-grade leak of financial data remains high-value for fraud and social engineering. North African financial institutions and customers should monitor for reuse of exposed data.LeakPriority 45
Filtración de la base de datos de TheFoat.com con 10,11 millones de registrosActor 'Jayko28' posted a 10.11 million-record database of the US site TheFoat.com on DarkForums on 9 Nov 2026, offered for download. The dump exposes user account data at scale, enabling credential stuffing and targeted phishing. US customers and the site operator should verify and remediate.LeakPriority 52
Filtración de la base de datos de la aseguradora Mutuelle des MotardsActor 'Vekdanor' published a 9.11 million-record database of the French motorcycle insurer Mutuelle des Motards on DarkForums on 9 Nov 2026. Insurance records typically include identity and contract details, making the data valuable for fraud and phishing. French policyholders and the insurer should treat credentials and personal data as exposed.LeakPriority 55
Filtración de 10,11 millones de usuarios de EscapadaRuralActor 'Mellirix' posted a 10.11 million-record user database of the Spanish rural-tourism platform EscapadaRural on DarkForums on 9 Nov 2026. The dump appears to expose account and personal data of real customers, a large fresh leak of a genuine company. Affected users face phishing and credential-stuffing risk.LeakPriority 50
Filtración de 10,11 millones de registros de la cadena FitnessParkActor 'metromec' released a 10.11 million-record database attributed to the French fitness chain FitnessPark on DarkForums on 9 Nov 2026. Membership data typically contains names, emails and contact details useful for phishing and account takeover. The fresh, large volume makes it a notable leak for the company and its members.LeakPriority 52
Filtración de la base de datos del exchange GeminiA large database attributed to the crypto exchange Gemini is advertised on DarkForums by user Lertozon, reportedly covering millions of records. Exchange customer data is high value for account-takeover, targeted phishing and draining of crypto wallets. Fraud and financial-crime teams should treat it as a credible exposure until the data is verified.