BRIEFLeakhighP58
Drupal.org database leak of 1.75 million lines of user data
Drupal.org
Detected8 October 2026 · 07:08 UTC
Reposts collapsed2
A leaked database attributed to Drupal.org with roughly 1,752,873 lines of user data (emails and phone numbers) is circulating. Drupal underpins thousands of websites, many in the public sector, so exposure of this user base can fuel credential-stuffing and targeted phishing against site operators. Organizations running Drupal should verify exposure and harden authentication.
CategoryLeak
Severityhigh
Priority score58
Detected8 October 2026 · 07:08 UTC
Leak● 42
Difusión de más de 7 millones de credenciales stealer a nivel mundialA fresh stealer-log dump of over 7,050,000 URL:login:password entries is being distributed for free, dated 10 August 2026. These logs frequently contain corporate SSO, VPN and webmail credentials that fuel account takeover and initial-access activity. Defenders should assume a portion remain valid and enforce resets with MFA.Leak● 48
Filtración de datos de ViewClass.com con pasaportes y datos personalesA database attributed to ViewClass.com is being leaked, allegedly containing full names, phone numbers, emails and passport numbers. The combination of identity and contact data enables identity theft, targeted phishing and account takeover. Affected users and partner organizations should be notified and monitored for credential abuse.Leak● 44
Filtrada la base de datos del minorista ruso Onlinetrade.ruA leaked database of Onlinetrade.ru, a Russian consumer-electronics retailer, is being distributed for free download on BreachForums. It likely contains customer accounts, emails and possibly payment data. Although outside Latin America, it feeds credential-stuffing lists that could be reused against regional users and businesses.Leak● 55
Ofrecen filtración china masiva de 50.000 millones de registrosA leak forum is advertising a Chinese data collection of over 50 billion records, one of the largest advertised dumps of 2026. Aggregated datasets of this scale fuel credential stuffing, identity theft and targeted fraud worldwide. Defenders should watch for reuse of corporate and customer credentials appearing in this corpus.Leak● 74
Filtración del sistema SCADA de Formapol en AméricaBreachForums is sharing what appears to be a Formapol SCADA system and monitoring dashboard covering the Americas, exposing operational technology telemetry and control views. If genuine, it would let intruders map and pivot into industrial control networks. Defenders in Latin American critical-infrastructure sectors should validate whether their assets are exposed.Leak● 78
Filtración del sistema SCADA de Wenlen S.A. en SudaméricaA BreachForums 'COLLECTION' post is distributing what appears to be data from the Wenlen S.A. SCADA system in South America, exposing industrial control telemetry and operational interfaces. If authentic, this gives attackers a map of OT networks to target critical infrastructure in the region. Regional energy, water and industrial defenders should verify exposure and rotate any leaked credentials immediately.