BRIEFLeakhighP60
Database leak of FFMADRID (ffmadrid.es)
ffmadrid.es
Detected22 October 2026 · 12:36 UTC
A threat actor posted a database dump attributed to FFMADRID (ffmadrid.es), a Spanish sports entity, dated 22 October 2026. Though record volume is unconfirmed, a leak of a real organization exposes member/personal data and login credentials reusable in phishing and credential-stuffing. Defenders should verify scope, force credential resets and monitor resale of the dump.
CategoryLeak
Severityhigh
Priority score60
Detected22 October 2026 · 12:36 UTC
Leak● 58
Filtración de 1,8 millones de credenciales de Privalia BrasilA seller posted a 1.8 million-row URL:login:password dataset attributed to Brazilian fashion retailer Privalia. The volume of valid credentials enables credential stuffing and account takeover against customers across Brazil and Latin America. Defenders should force password resets and monitor for reused passwords tied to the brand.Leak● 62
Filtración de 2,16 millones de registros de la eléctrica SWEPCOA 2.16 million-row dataset tied to SWEPCO, a US electric utility, was posted for leak on BreachForums. Exposure of customer and operations-adjacent records for an energy provider merits attention given critical-infrastructure implications. Verify authenticity and monitor for follow-on targeting of utility staff and systems.Leak● 28
Base de datos de empleados de Canada Post (2023)A BreachForums post shares roughly 69,860 lines of Canada Post employee data dated to May 2023. Because the records are years old, this is not a fresh alert, but employee credentials can still enable phishing and ongoing account abuse if not rotated. Treat as a stale but useful reference for credential exposure.Leak● 42
Filtración de datos de la eléctrica Entergy TexasA 176,615-row dataset linked to Entergy Texas, a US electric utility, was posted for distribution. Even a moderate-sized leak of energy-sector customer data can enable targeted phishing and fraud against utility customers. Monitor for use of these records in social engineering against the provider and its users.Leak● 44
Filtración de datos de Coca-Cola con números SSNA BreachForums listing offers a cocacola.com dataset of roughly 16,500 rows that includes about 16,000 SSNs. Exposure of SSNs tied to a major corporate brand drives identity theft and targeted social engineering against employees or customers. Smaller in scale but PII-heavy, it is worth monitoring for downstream abuse.Leak● 45
Filtración de base de datos de FFMADRID.ES (España)A DarkForums member posted a database purportedly from FFMADRID.ES, a Madrid-based .es entity, in October 2026. Spanish sports/regional organizations hold member and contact data useful for phishing and impersonation. Freshly posted and region-relevant, it merits verification of scope and affected records.