BRIEFLeakcriticalP88
Invoice leak from Quintana Roo's Mobility Institute
IMOVEQROO (Instituto de Movilidad del Estado de Quintana Roo)
Detected1 November 2026 · 10:24 UTC
A DarkForums thread exposes invoices from Mexico's Quintana Roo state mobility institute (IMOVEQROO), potentially revealing taxpayer names, amounts, addresses, and supplier data. As a government body, the exposure can enable fraud, impersonation, and targeted attacks against official procedures and payments. Defenders should verify the dataset and notify authorities if the leak is confirmed.
CategoryLeak
Severitycritical
Priority score88
Detected1 November 2026 · 10:24 UTC
Leak● 66
Filtración de la base de datos de Cultura.com con 2 millonesDarkForums user Wraxniter published a database attributed to French cultural retailer Cultura.com on October 31, 2026, claiming 2 million records. The data likely includes customer account details that can support phishing, account takeover, and credential reuse. Although smaller than other leaks, it is fresh and tied to a real retailer with a large customer base.Leak● 76
Filtración de 31,1 millones de registros de FitnessParkOn October 31, 2026, DarkForums user Lynyetol posted a database attributed to French gym chain FitnessPark with 31.10 million records. The volume suggests customer names, emails, phones, and possibly credentials, which are valuable for phishing and credential-stuffing. French organizations and FitnessPark customers should treat the exposure as a fresh, large-scale leak.Leak● 80
Filtración de datos de 31,1 millones de ciudadanos israelíesDarkForums user Torramyr posted a 31.10 million-record dataset labeled as Israeli citizens' data on October 31, 2026. If authentic, the scale exposes national PII that can fuel identity theft, phishing, and impersonation campaigns. The freshness and volume make it a high-priority leak for Israeli organizations and defenders monitoring regional exposure.Leak● 40
Brecha de datos en un revendedor de hardware de LedgerA thread titled 'LEDGER HARDWARE CRYPTO RESELLER BREACH' was posted on an underground forum, indicating leaked customer data from a reseller of Ledger hardware wallets. Such data typically includes names, addresses and order history, which historically fuels physical-threat and phishing campaigns against crypto holders. The content is login-walled and undated, so scale and recency cannot be confirmed, but the topic is relevant for crypto-asset defenders.Leak● 45
Filtración de base de datos de SquareTrade con 911.000 cuentasA RaidForums clone is offering a free download of a SquareTrade.com database containing roughly 911,000 user accounts and 41.4 million records. The dataset exposes customer contact and account details of a large US device-protection/insurance provider. Because the post has no recent date and this breach has circulated for years, it is a repost rather than a fresh incident, but it can still fuel credential-stuffing and phishing.Leak● 40
Filtración de 228 cuentas corporativas de Telkom IndonesiaA DarkForums leak thread claims 228 records tied to telkom.co.id, described as corporate accounts plus internal access data and tagged 2026. The volume is small, but the target is a national telecommunications operator, so any internal credentials can serve as an initial foothold into critical infrastructure. Defenders should treat it as a possible credential-exposure lead rather than a mass breach.