BRIEFLeaklowP22
Document leak at Algerian state bank Crédit Populaire d'Algérie
Crédit Populaire d'Algérie (CPA)
Detected14 September 2026 · 12:12 UTC
Documents attributed to Crédit Populaire d'Algérie, Algeria's state-owned bank, are circulating, with a separate actor claiming the hack. The material is dated June 2025, so it is stale rather than a fresh alert, but leaked banking/customer documents can still fuel fraud and account takeover. Useful mainly as actor and sector background.
CategoryLeak
Severitylow
Priority score22
Detected14 September 2026 · 12:12 UTC
Leak● 40
Base de datos completa de Serasa Experian (1,8 TB) republicadaA RaidForums mirror is circulating a thread offering the 'complete' 1.8 TB dataset attributed to Serasa Experian, Brazil's largest credit bureau. This is a well-known older leak being re-posted rather than a new breach, so immediate exposure is limited, but the data (consumer and business credit records) remains widely available and fuels identity fraud and loan fraud against Brazilian citizens and companies. Brazilian banks and credit-dependent businesses should assume this consumer data is public.Leak● 65
Reclamación de filtración de datos del sitio web de InterpolA DarkForums member (Ylondunor) posted on 30 October 2026 a thread labeled 'Interpol.int DATA LEAK', claiming data from the international law-enforcement agency's web infrastructure. The scope, record count and authenticity are not yet verified, but any alleged breach of Interpol is high-profile and often recycled by scammers or used to seed further targeting of police and government contacts. Defenders in law-enforcement and justice sectors should treat the claim as unconfirmed but monitor for leaked credentials and phishing that impersonates Interpol.Leak● 36
Filtración de más de 200 millones de líneas de Twitter/X publicadaA 200+ million line Twitter/X dataset labelled a DB/scrape leak has been posted on DarkForums. Much of it is likely scraped public data, but combined with emails it can support credential-stuffing and profiling. Treat it as aggregated exposure rather than a fresh structured breach.Leak● 40
Código fuente de la Universidad King Faisal filtradoA DarkForums user has posted source code attributed to King Faisal University, a Saudi public institution. Exposed source code can reveal hardcoded secrets, authentication logic and undisclosed endpoints, aiding intrusion and follow-on attacks. The post does not state the scope or recency of the code.Leak● 40
Megafiltración de Diia (Ucrania) con más de 20 millones de ciudadanos reapareceA DarkForums thread reposts a claimed Diia mega leak affecting 20M+ Ukrainian citizens, the government digital ID and services platform. If authentic, it exposes identity, contact and document data enabling fraud and impersonation. The thread references 2025, so it is a resurfaced/older claim rather than a new incident.Leak● 52
Base de datos de Tvoe con 2 millones de registros filtradaA 2 million record database attributed to Tvoe, a Russian streaming/telecom service, has been posted for download on DarkForums. Customer records of this size enable credential-stuffing, phishing and account takeover of subscribers. Tvoe customers and partners should treat affected credentials as compromised.