BRIEFLeakhighP62
Vodafone core database leak
Vodafone
Detected17 September 2026 · 13:12 UTC
A threat actor claims to have compromised Vodafone's core database and posted an encrypted drop on a cloned forum. Vodafone is a major global telecom, so a core database leak could expose subscriber and infrastructure data at scale. Defenders in telecom should treat this as a possible exposure pending verification.
CategoryLeak
Severityhigh
Priority score62
Detected17 September 2026 · 13:12 UTC
Leak● 55
Volcado masivo de 1.200 millones de credenciales (44 GB)A 44 GB dump containing roughly 1.2 billion URL:login:password lines was posted on 15 September 2026. This is a very large stealer-log aggregation, implying massive credential-reuse risk across corporate and consumer accounts. Defenders should enable credential-leak detection and force resets for exposed users.Leak● 42
Filtración de datos de John Lewis, Currys y American AirlinesA leak thread offers data linked to UK retailers John Lewis, Currys and PC World plus US airlines American Airlines and Southwest. Collections like this usually contain customer accounts and credentials that feed fraud and account takeover. It is outside LatAm, but the airlines' reach makes it worth tracking.Leak● 55
Base de datos de Samsung a la venta en foro clandestinoA freshly posted thread on a darkweb forum claims a Samsung database is up for grabs, potentially exposing customer or corporate records of the global electronics giant. If genuine, such data would support fraud, account takeover and targeted attacks. Authenticity and scale are unverified, so treat it as an unconfirmed lead.Leak● 60
Volcado de datos de Sudamérica con datos de Argentina y BrasilA criminal forum post advertises a verified South America data dump covering Argentina, Brazil, Chile and more, likely credentials or personal data. Such region-specific collections enable account takeover and targeted phishing against Latin American organizations. Local defenders should hunt for reuse of these leaked credentials.Leak● 35
Base de datos de Chile con 10 millones de registros circula en foroA 10-million-record database described as Chilean is circulating on BreachForums. If authentic, it could expose a significant share of Chile's population to identity theft and phishing. The posting dates to July 2025, so it is not a fresh incident but remains relevant for exposure monitoring.Leak● 42
Datos internos de Coinbase (50.000 registros) a la ventaA seller is offering roughly 50,000 records described as insider Coinbase data, including a named individual. Even partial customer or internal data from a major crypto exchange fuels account takeover, phishing and regulatory exposure. Worth tracking to verify authenticity and scope.