BRIEFLeakhighP47
BeMyEye database leak exposes 25 million users
BeMyEye
Detected17 October 2026 · 09:55 UTC
A complete user database of crowdsourcing/mystery-shopping platform BeMyEye, roughly 25 million records, is being distributed for free on DarkNetArmy. The dump reportedly includes revenue and company funding data alongside user PII, which enables identity theft, credential stuffing and highly targeted phishing against corporate clients. Defenders whose employees or partners use the platform should treat it as compromised and monitor for reuse of those emails and phone numbers.
CategoryLeak
Severityhigh
Priority score47
Detected17 October 2026 · 09:55 UTC
Leak● 60
Base de datos de Komehyo Singapur (2M registros) a la ventaA seller lists a +2M-record database belonging to Komehyo's Singapore operations, a luxury resale/recommerce retailer. Exposed e-commerce customer data supports credential reuse, phishing and fraud against shoppers. Verification, password-reset enforcement and fraud monitoring are advisable.Leak● 62
Base de datos de Bajaj Auto con 860K registros a la ventaA threat actor is selling a +860K-record database attributed to Bajaj Auto, a major Indian automotive manufacturer. Such customer/dealer data fuels phishing, account takeover and fraud, and can aid B2B targeting. Contextual monitoring and customer notification planning are warranted.Leak● 72
Base de datos de Vested Finance (11M registros) a la ventaA seller is offering a +11M-record database belonging to Vested Finance, a US/India fintech platform. Customer PII and likely financial/account data at this scale enables credential stuffing, targeted phishing and account-takeover fraud against the firm's user base. Defenders should verify exposure, force resets and monitor for downstream fraud.Leak● 34
Filtración de datos personales de 200.000 húngaros de tiszavilag.huA seller on DarkNetArmy is offering roughly 200,000 records of Hungarian citizens allegedly tied to the tiszavilag.hu political platform, posted minutes ago by an unverified account. The data appears to be citizen PII linked to a political movement, which raises targeting, doxxing and influence-operation risks rather than enterprise compromise. It is fresh but outside the Argentina/LATAM scope and the seller is unverified, so treat as low priority.Leak● 35
Datos de empresas multinacionales ofrecidos a la ventaA very recent DarkForums post advertises data from multiple multinational companies for sale, but names no specific victim or record count, making the claim unverifiable. If real, it could indicate a broker holding several corporate datasets. Treat as low-confidence until the seller provides samples tied to named organizations.Leak● 37
Base de datos de estudiantes de la universidad ITB de Indonesia a la ventaA fresh DarkForums listing offers a leaked student database belonging to ITB, a major Indonesian technical university. Education-sector PII such as names, IDs and contact details would be exposed if genuine. It is recent but outside the LATAM region, so relevant mainly as credential-reuse and supply-chain context.