BitBox Swiss hardware crypto wallet order data leak

Bitbox.swiss

Detected12 October 2026 · 23:53 UTC

Why it matters

Order data from BitBox, a Swiss hardware crypto wallet vendor, is being shared. Customer order records expose buyer identities, shipping addresses, and purchase details of high-value crypto holders. This is prime targeting material for phishing and physical-attack risk against wallet owners.

MetadataRECORD

CategoryLeak

Severityhigh

Priority score52

Detected12 October 2026 · 23:53 UTC

Related items6

Leak● 30

Combolist de 430.000 credenciales de Brasil (marzo 2026)A 430K+ Brazil-focused email:password combolist dated March 2026 is circulating. Because it predates today by months it is not a fresh alert, but it can still fuel credential-stuffing against Brazilian services and users. Low urgency, mostly historic exposure.

28m

Leak● 54

Filtración de vigilancia del aeropuerto de Shanghái (Suishenma)A threat actor claims to have obtained surveillance-related data tied to Shanghai's Suishenma platform connected to airport monitoring. Exposure of physical-security or biometric data at a major transport hub enables profiling, stalking and abuse of government surveillance infrastructure. Relevant for analysts tracking gov-adjacent infrastructure leaks.

28m

Leak● 60

Venta de licencias de conducir mexicanas válidasA vendor is advertising nationally valid Mexican driver's licenses, suggesting either abuse of genuine government issuance or high-quality forgeries. Such documents fuel identity fraud, account takeover and bypass of KYC, age and identity checks across Mexico. Relevant for LATAM defenders tracking identity-document abuse.

28m

Leak● 34

Combolist de 325.000 credenciales de correo de BrasilA DarkForums leak thread advertises a freshly checked combolist of roughly 325,000 Brazilian email:password pairs. Such credentials fuel credential-stuffing and account-takeover against Brazilian users and services. It is only a mid-sized combolist, so impact is limited, but regionally relevant for tracking credential re-use.

Leak● 44

Base de datos de 7,4 millones de ciudadanos de Paraguay a la ventaA dark-web post offers a database allegedly containing data on 7.4 million Paraguayan citizens, close to the country's entire population. This implies national-ID, personal and possibly electoral records at massive scale, highly sensitive for identity theft. However, the post is dated May 2025, so it is not a fresh alert; verify validity and any renewed redistribution.

Leak● 30

Filtración de datos personales del Registro Electoral de Argentina (2013)11 million records of Argentine personal data from the 2013 Electoral Registry are being reposted. The data is over a decade old, so it is largely stale, but it still contains names, DNI, and addresses useful for identity fraud. It is not a fresh incident and merits only background awareness.