BRIEFLeaklowP40
Database leak of social networking site BookCrossing
BookCrossing
Detected10 October 2026 · 17:21 UTC
Reposts collapsed2
A database for the social and book-sharing site BookCrossing is being offered in DarkForums' leak section in a freshly posted thread. If genuine it would expose member account and profile data, enabling credential stuffing and phishing. Scale is unclear, but the recency warrants a quick look by brand-protection and fraud teams.
CategoryLeak
Severitylow
Priority score40
Detected10 October 2026 · 17:21 UTC
Leak● 30
Filtración de la base de datos del comercio brasileño MoobrioA database allegedly belonging to Brazilian retailer moobrio.com.br is being shared on DarkForums. The thread dates from December 2024, so this is stale rather than a fresh incident. If the records are customer PII they could support fraud and phishing against Brazilian consumers, but urgency is low.Leak● 38
Filtración de 2.870 millones de usuarios de Twitter/X en un dataset de 450GBA cleaned dataset of roughly 2.87 billion Twitter/X user records (~450GB) is circulating on BreachForums. It looks like a repackaged version of the older 2023 Twitter scrape rather than a new breach, so alerting value is limited. It still feeds email/phone enumeration and targeted phishing against X users, so brand and fraud teams should be aware.Leak● 45
Filtración de base de datos de la firma fiscal Tobin & CompanyA database attributed to US firm Tobin & Company (tax, auditing and consulting) is advertised on DarkForums. Tax and accounting firms hold sensitive client PII and financial records, making such a leak valuable for fraud and business email compromise. It is outside the AR-LATAM region but worth tracking for affected clients.
Leak● 50
Filtración de 20 millones de credenciales URL:login:contraseñaA 20-million-line credential dump (URL:login:password) is being distributed free on a Russian-language forum, dated 10 October 2026. Mega-leaks of this size fuel credential-stuffing and account-takeover against any organisation whose users reused passwords. Defenders should reset exposed credentials and watch for anomalous logins.
Leak● 38
Filtración de 20 millones de credenciales URL:login:contraseñaA freshly posted dump offers 20 million URL:login:password stealer-log entries dated 10 Oct 2026. Credential sets of this size fuel credential-stuffing and initial-access attempts against many organizations and may include corporate SSO or portal logins. Defenders should monitor for reuse of leaked credentials against internet-exposed services.Leak● 58
Filtración de base de datos de Winamax con 563.659 clientesA threat actor is leaking a database of 563,659 customers of the French online betting site Winamax.fr. The dataset exposes personal data of users, enabling phishing, account takeover and regulatory exposure for the operator. Betting accounts often tie to payment and identity data, compounding the fraud risk for affected customers.