BRIEFLeakhighP74
MrBeast Store Shopify database offered for sale
MrBeast Store (Shopify)
Detected25 October 2026 · 17:41 UTC
Reposts collapsed2
The actor 'beastfeast' is selling a Shopify database of more than 2 million customer records from the MrBeast Store on BreachForums, posted on Saturday 24 October. Such dumps typically contain names, emails, shipping addresses and order histories, enabling phishing, credential stuffing and fraud against buyers. Any e-commerce brand running on Shopify should treat this as a live exposure and verify which of its own records appear in the dump.
CategoryLeak
Severityhigh
Priority score74
Detected25 October 2026 · 17:41 UTC
Leak● 40
Base de datos de la taiwanesa Popchill publicada en un foroAn onion forum thread announces a dumped database belonging to Popchill.com, a Taiwanese second-hand fashion marketplace, but the body is behind a login wall. No record count, sample or date is visible from the title alone. If genuine, it would expose customer PII for a regional e-commerce platform and enable account-takeover attempts.Leak● 68
Filtración de la base de datos de EscapadaRural (2,9M registros)A BreachForums thread offers a downloadable database allegedly belonging to Spain's rural-tourism platform EscapadaRural.com, with roughly 2.9 million records and a thread spanning several pages of replies. No publication date is visible, so freshness is unconfirmed, but the scale of customer PII enables phishing and credential stuffing against Spanish users and travel businesses.Leak● 92
Base de datos de SENECYT (Ecuador) publicada en BreachForumsUser 'pheisito' posted a database belonging to SENECYT, Ecuador's national secretariat for higher education, science and technology, on BreachForums on 25 October 2026. The dump targets an Ecuadorian public-sector body and likely exposes institutional, staff and student records. Fresh government data leaks in the region justify immediate verification and containment.Leak● 40
Dump de más de 500.000 credenciales de dominios .com publicadoA VIP-section release dated 24 October 2026 offers a 500K+ ULP (URL:login:password) list covering .com domains, i.e. working-style credentials for named websites rather than free-mail combos. Because the targets are unspecified sites, any .com-hosted service could see employee or customer credentials replayed in credential stuffing and account takeover attempts.Leak● 55
Colección de 4,5 TB atribuida a defensa e inteligencia de Israel a la ventaA BreachForums thread in the Databases section claims to offer a 4.5TB 'collection' attributed to Israeli defense, the IDF and Mossad, without verifiable samples or provenance. It is most likely recycled or fabricated scam material, but if genuine it would expose highly sensitive military and intelligence data. Analysts covering Israel-linked or defense-sector interests should validate samples before treating it as a real breach.Leak● 40
Venta de leads de clientes bancarios de España en BreachForumsA seller on BreachForums is advertising 'exclusive, premium quality' Spanish bank leads, which typically consist of customer PII or account-holder data. The source, exact volume and quality are undisclosed and unverified. Spanish financial institutions should treat this as a potential customer-data exposure and watch for downstream fraud.