BRIEFLeakhighP68
Database leak of Spain's Air Miles España (travelclub.es)
Air Miles España S.A. (travelclub.es)
Detected5 November 2026 · 19:33 UTC
On 5 November 2026 a DarkForums user published a database belonging to Air Miles España S.A., the operator of travelclub.es, a Spanish travel loyalty platform. The dump exposes customer records tied to a travel and rewards service, a common target for credential stuffing and booking fraud. Spanish travel and loyalty firms should check for exposure and notify affected members.
CategoryLeak
Severityhigh
Priority score68
Detected5 November 2026 · 19:33 UTC
LeakPriority 38
Volcado de usuarios de Active Directory del municipio de Fredrikstad (Noruega)A forum post on Spear by user kaya offers an Active Directory user dump from the Norwegian municipality of Fredrikstad. AD user listings enable username enumeration, password spraying and phishing against municipal staff. The post appears months old, so it is context rather than a fresh alert.LeakPriority 46
Posible filtración de datos de apollo.io publicada en 2026A DarkForums thread by user Jorpakor offers a file described as an apollo.io leak from 2026. Apollo.io aggregates B2B contact data, so a genuine release would expose business emails and firmographic details used in targeted phishing. The size and authenticity are unverified, so treat it as a lead to validate.LeakPriority 50
Base de datos de Paytm ofrecida en un foro clandestinoA DarkForums post by user Junhodor advertises a database linked to paytm.com, one of India's largest payment platforms. If genuine, it could expose customer identities and transaction-related data at scale, feeding phishing and account fraud. Fintech defenders should verify the claim and monitor for credential stuffing.LeakPriority 54
Filtración de 5,11 millones de registros de la cadena francesa FitnessParkA DarkForums post by user Jorpakor offers a dataset of about 5.11 million records attributed to the French fitness chain FitnessPark. Membership data usually includes names, emails, phones and payment details, enabling phishing and account takeover. Consumer-facing firms in Europe should monitor for reuse of these credentials.LeakPriority 60
Base de datos filtrada de QiCard, la tarjeta de pago nacional de IrakA DarkForums post by user Halvulox advertises a leaked database from QiCard, Iraq's state-linked national payment card scheme used for salaries and pensions. Such data would include identity and financial details of millions of citizens. It is a critical-infrastructure-adjacent leak worth tracking even outside Latin America.LeakPriority 66
82 millones de direcciones de Yuantong Express (China) a la ventaA DarkForums listing by user Quarbivas offers about 82 million records allegedly containing Yuantong Express delivery addresses. Parcel datasets expose names, phones and home addresses at massive scale, enabling fraud and physical-risk scenarios. Logistics and e-commerce defenders should treat the volume as a major privacy incident.