BRIEFLeakhighP45
Salesfloor customer database leaked for free download
Salesfloor
Detected14 October 2026 · 08:53 UTC
The Salesfloor database has been posted for free download on a major breach forum, with long-running discussion indicating a large multi-page release. Salesfloor supplies retail clienteling software, so the data may include customer records and contacts tied to multiple retail brands. Affected retailers and their customers should treat credentials and PII as compromised.
CategoryLeak
Severityhigh
Priority score45
Detected14 October 2026 · 08:53 UTC
Leak● 30
Combolist de 90.000 credenciales de correo de MéxicoA combolist of roughly 90,000 email:password pairs tagged to Mexico was released as 'fresh' on October 14. It fuels credential-stuffing and account-takeover against Mexican mailboxes and linked services. It is a generic regional credential set rather than critical-infrastructure compromise, but defenders in Mexico should force resets and watch authentication anomalies.Leak● 33
Combolist de 24 millones de credenciales URL:email:passA large credential dump of roughly 24 million URL:email:password triples has been posted as 'fresh', though it is months old. This stealer-log volume enables mass credential-stuffing and session hijacking across many services. Organizations should check their domains against the set and enforce MFA, but it is generic data rather than a targeted breach.Leak● 42
Filtración de datos sensibles del DRDO y militares de IndiaA leak forum claims highly sensitive data from India's Defence Research and Development Organisation (DRDO) and military has been exposed. Such material can reveal defence projects, personnel and technical details valuable to state and non-state actors. Although it lies outside Latin America, regional defence and intelligence teams should track it as a precedent for military-sector exposure.Leak● 58
Base de datos de inversores bursátiles de EE. UU. a la ventaA seller is offering a claimed direct dump of US stock-investor records pulled from major brokerage systems. If genuine, it exposes investor PII and financial account data usable for account takeover, identity theft and targeted fraud. Brokerages and wealth managers should verify exposure and monitor for credential-stuffing and account-takeover attempts.Leak● 50
Base de datos de ciudadanos de Polonia a la ventaA seller is offering a 'Poland Citizen Database', a potentially high-impact national citizen dataset posted just recently. If authentic, it exposes personal identifiers enabling identity theft, fraud and account takeover. Given the scale implied, it warrants verification and monitoring.Leak● 52
Filtración masiva de datos de Taiwán (3,46 GB)A 3.46 GB dataset advertised as a large Taiwan data leak was posted yesterday, suggesting a sizable compromise of Taiwanese data. The exact content is unverified, but the volume implies records that could fuel fraud and credential attacks. Analysts should acquire and validate the sample before acting.