BRIEFLeaklowP38
CarMax database leak attributed to ShinyHunters
CarMax
Detected27 October 2026 · 18:24 UTC
The ShinyHunters group posted a CarMax customer database on the Spear Leaks forum, exposing records of the large US used-car retailer. However, the thread is dated January 2026, roughly nine months old, so it is not a fresh alert and the data has likely circulated widely already. It matters only as background for credential-stuffing and fraud monitoring against the retailer's customers.
CategoryLeak
Severitylow
Priority score38
Detected27 October 2026 · 18:24 UTC
Leak● 25
Filtración de datos de 130.000 usuarios de BumbleA moderator on the Spear forum posted a 130k-user dataset tied to Bumble.com, dated March 2026. Though now months old, leaked profile and contact data can fuel targeted phishing and account-takeover attempts against users. Bumble users and trust-and-safety teams should remain alert to impersonation scams leveraging the exposure.Leak● 45
Base de datos de 6 GB de NTC Group a la ventaA 6GB database attributed to NTC Group (ntcgroup.com) is being offered on a Russian-language leak forum behind a login wall. The size suggests a broad dump of customer or internal records, though the exact contents and date are unverified. Partners and customers of this vendor should assess whether their data is included.Leak● 58
Filtración de tarjetas de 17.000 clientes del ICICI BankA forum post advertises a data leak affecting ICICI Bank, India's largest private-sector bank, exposing credit card details for roughly 17,000 customers. Compromised card data feeds card-not-present fraud and bank-impersonation phishing. Although the exact date is unclear, financial data leaks of a major bank warrant attention from fraud and CTI teams.Leak● 30
Combolist de 8 millones de credenciales usuario-contraseña a la ventaA forum user on xReactor published a fresh combolist of roughly 8 million email:password pairs, marketed as newly checked. The dump has no single named victim, so its main value is as fuel for credential stuffing and password spraying against any organization with weak MFA. Defenders should assume some corporate accounts may appear once the file propagates and proactively force resets on any exposed mail domains.Leak● 38
Filtración de la base de datos de la armería Guns.comThe pwnfrm leak forum lists a downloadable dump attributed to Guns.com, a US firearms and outdoor retailer. Customer records from a firearms seller are elevated-risk because they tie real identities to specific purchases, aiding extortion, burglary targeting and fraud. The post is behind a login wall with no sample, date or record count, so scale and recency are unverified.Leak● 40
Colección de bases de datos de votantes de Estados UnidosA leak-aggregator thread on the pwnfrm forum offers a bundle of US voter registration databases for download. Voter files expose names, home addresses, party affiliation and phone numbers at national scale, which fuels doxxing, targeted disinformation and impersonation. The thread is login-walled with no sample, date or record count, so freshness and scope cannot be confirmed.