BRIEFLeaklowP42
CryptoExchange.com virtual machine image leaked
CryptoExchange.com
Detected30 September 2026 · 22:31 UTC
An administrator posted a VM image of CryptoExchange.com in Spear's leaked-tools section, which could expose exchange infrastructure, configs or stored credentials. A leaked VM for a financial/crypto platform is high value for follow-on intrusion and fund theft. The post dates to early January 2026, so it is not a fresh alert but still worth tracking.
CategoryLeak
Severitylow
Priority score42
Detected30 September 2026 · 22:31 UTC
Leak● 61
Filtración de base de datos del sistema de mensajería IYS de Turquía (302K)A 302,000-record database allegedly tied to Turkey's IYS (İleti Yönetim Sistemi), the state-run platform for managing commercial electronic messages, is being circulated for download. It appears to expose user contact and consent data linked to a government-operated system. Defenders in telecoms and regulators should expect downstream phishing, SMS abuse and reputational/regulatory fallout.Leak● 48
Filtración de bases de datos de múltiples sitios suizos (beesolutions.ch)A thread on BreachForums advertises 'Multiple-Swiss-Site databases' from intranet.beesolutions.ch, indicating data from several Swiss web properties was exfiltrated and is being circulated. The exact record count and date are unclear, but stolen databases of corporate intranets feed credential reuse and business-email-compromise. It is relevant as a real organizational leak, though outside the LATAM focus.Leak● 68
Base de datos de la Universidad Tecnológica de Tula-Tepeji (México) publicadaA full database belonging to a Mexican public university (UTTT, Hidalgo) is being offered on DarkForums, likely containing student, staff and institutional records. This is a Latin American education-sector breach that enables credential stuffing, targeted phishing of .edu.mx accounts and identity fraud. Defenders in MX academic/critical-infra should watch for downstream abuse of exposed accounts.Leak● 46
Venta de base de datos con 102.000 usuarios de apuestas alemanesA seller is offering a database of roughly 102,000 German gambling users dated September 2026. Gambling accounts typically carry KYC identity and payment data, valuable for fraud and targeted abuse. It is a fresh, sizable leak outside Latin America, relevant for fraud and regional tracking teams.Leak● 52
Venta de 549.000 cuentas de compras de ZalandoA seller is offering 549,000 records of Zalando shopping/account data billed as fresh 2026 private data with many valid hits. Zalando is a major European e-commerce retailer, so these credentials enable account takeover and payment fraud. Bulk availability of verified hits raises the risk of credential-stuffing against the retailer and its customers.Leak● 58
Filtración de base de datos de Serasa Experian (Brasil)A database attributed to Serasa Experian, Brazil's largest credit bureau, has surfaced on DarkForums. It exposes consumer credit and personal data tied to a critical Latin American financial-infrastructure provider serving thousands of lenders. The post appears dated February 2026, so it is a re-surface rather than a fresh breach, but the entity's systemic importance warrants monitoring.