BRIEFLeakhighP55
Patient records leak from Czech hospital (nemocnicest.cz)
Hospital checo (nemocnicest.cz)
Detected4 October 2026 · 11:56 UTC
Records from a Czech hospital (nemocnicest.cz) — roughly 437K entries with contact, demographic and medical data — are being traded. Healthcare data is highly sensitive and enables medical fraud and targeted phishing. This is a critical-sector leak requiring patient notification and monitoring.
CategoryLeak
Severityhigh
Priority score55
Detected4 October 2026 · 11:56 UTC
Leak● 44
Filtración de 374K registros de usuarios del instituto sanitario italiano IZSLTRoughly 374K user registration and contact records from Italy's public health research institute IZSLT (izslt.it) are being offered. The institute is a government-linked veterinary/public-health body, so the leak can support phishing against public-health staff. Lower impact, but a legitimate critical-sector exposure.Leak● 46
Venta de 400K correos institucionales de gobierno y educación de Reino Unido e IrlandaA seller on spear.cx is offering 400K+ institutional email addresses harvested from UK and Ireland government and education organisations, posted around 2026-10-01. These lists enable credential-stuffing, phishing and business-email-compromise campaigns against public bodies. Public-sector and education security teams should treat it as an active threat.Leak● 53
Filtración de datos de clientes de Hrvatski Telekom (Croacia)A database of roughly 237K customer records from Croatian telecom Hrvatski Telekom (hrvatskitelekom.hr) is being offered, including emails and phone numbers. Telecom operators are critical infrastructure, so this data enables phishing, SIM-swap and account-takeover attacks. Croatian subscribers and the operator's security team should treat it as an active exposure.Leak● 48
Filtración de base de datos de Restorecord con 840.000 registrosA database of 840,000 records belonging to Restorecord, a Discord server-restore service, is being shared. It likely contains user IDs, emails and authentication data for thousands of Discord communities. Leaked account data enables account takeover and impersonation.Leak● 53
Venta de 400.000 correos de gobierno y educación de Reino Unido e IrlandaA seller is offering 400,000+ institutional email addresses from UK and Ireland government and education organizations. The list enables targeted phishing and credential-stuffing against public-sector bodies. UK/Ireland gov and edu defenders should watch for follow-on phishing.Leak● 57
Base de datos de una policía de EE. UU. con 90.000 registros a la ventaA poster claims a 90,000-record database from a US police department is available. If genuine, it exposes law-enforcement personnel or case data usable for doxxing and social engineering. Police records are highly sensitive and frequently reused across investigations.