BRIEFLeakhighP44
Leak of passport scans from over 20 countries
Detected15 September 2026 · 12:12 UTC
A collection of scanned passports from more than 20 countries is circulating, exposing highly sensitive identity documents. Such scans fuel identity theft, forged documents and cross-border account takeover. Affected individuals face long-term fraud risk and should be alerted where identifiable.
CategoryLeak
Severityhigh
Priority score44
Detected15 September 2026 · 12:12 UTC
Leak● 48
Base de datos de Binance Francia a la venta (75.105 líneas)A vendor is selling a database attributed to Binance France containing roughly 75,105 records. Even if partial, exchange user data fuels phishing, SIM-swap and account-takeover campaigns against crypto holders. Regional KYC data increases the identity-theft and regulatory exposure for affected users.Leak● 52
Filtración de datos de clientes de ZenLedger a la ventaA seller is advertising a customer data leak from ZenLedger, a crypto tax software provider that holds sensitive financial and identity data. Customer lists of tax/crypto platforms are valuable for phishing, account takeover and targeted fraud. Users of the platform face elevated risk of identity theft and crypto-related social engineering.Leak● 55
Filtración de 1 millón de registros URL:LOG:PASS (stealer logs)A fresh private dump of roughly 1 million URL:LOG:PASS stealer-log entries has been published, aggregated from infostealer infections. The set is large and current, so it enables credential-stuffing and session hijacking against enterprise and consumer services. Security teams should hunt for exposed credentials in their domains and force resets where matches appear.Leak● 72
Venta de datos militares confidenciales de SEKISUI AerospaceA seller is offering what is described as confidential military data belonging to SEKISUI Aerospace, a defense and aerospace supplier. If authentic, this exposes sensitive engineering, contract and program information relevant to defense supply chains. Defenders in aerospace/defense and their partners should treat it as a potential precursor to targeted intrusion or extortion.Leak● 53
Filtración de 757K registros del programa de fidelización PAYBACK (Alemania)About 757,000 dehashed records of PAYBACK, a major German loyalty program, are being offered, likely including names, addresses and account data. Loyalty databases are valuable for credential stuffing and phishing against customers. The volume and 'dehashed' quality raise the risk of widespread account takeover.Leak● 55
Filtración de base de datos del Ayuntamiento de París (320K)A database of roughly 320,000 records attributed to the Mairie de Paris (Paris City Hall) is being sold on a dark web forum, exposing citizen and municipal data. Government records enable identity theft, phishing and targeted attacks on public services. Though posted in early 2026, the data can still be reused for fraud and account takeover.