BRIEFLeaklowP28
Black Basta internal chat logs available for download
Black Basta (grupo de ransomware)
Detected21 October 2026 · 12:39 UTC
Reposts collapsed2
A forum post offers a download of the leaked internal chat logs of the Black Basta ransomware group. The material appears to be a re-post of an earlier public leak rather than a fresh breach, but it still offers valuable insight into the group's TTPs, affiliates and tooling for detection and attribution.
CategoryLeak
Severitylow
Priority score28
Detected21 October 2026 · 12:39 UTC
Leak● 50
Base de datos de la academia de la RFEF (113.681 registros) ofrecidaA clandestine forum thread advertises a database from academia.rfef.es, the training platform of Spain's Royal Football Federation, with about 113,681 records. It likely exposes students and technical staff with personal data and account material, valuable for targeted phishing and identity fraud against the sports sector. Authenticity should be verified and the entity notified to the Spanish data protection authority.Leak● 60
1,8 millones de credenciales de Privalia Brasil publicadasAn actor posted roughly 1.8 million URL:log:pass pairs attributed to Privalia, a fashion retailer with a large Brazilian customer base. The dump enables credential stuffing against customer accounts and staff panels, and its size suggests password reuse across other Latin American services. Defenders should force resets, watch for anomalous logins and check for employee credentials in the set.Leak● 38
Base de datos de 300K clientes de upcworld.ae a la ventaA database of roughly 300,000 records from upcworld.ae is offered for sale. Though moderate in size, it can expose customer and order data enabling phishing and fraud against the UAE-based retailer's clients. It is worth tracking as part of a seller's ongoing dump series.Leak● 44
Base de datos de Rotoris.com con más de 1M de registros a la ventaA database of more than 1 million records attributed to Rotoris.com is listed for sale on DarkForums. The volume suggests customer account and contact data rather than a trivial scrape. Buyers can pivot this into credential stuffing and targeted phishing against the site's user base.Leak● 47
Filtración de la base de datos del portal business.adobe.com de AdobeA database associated with Adobe's business portal is circulating in a leak forum with active replies within the last hour. If genuine, it exposes corporate account and contact data of enterprise customers. Adobe is a high-value SaaS vendor, so leaked business-portal credentials warrant checking for reuse across connected enterprise services.Leak● 50
Base de datos de 7M de registros de LOHONO Luxury a la ventaA seller is offering a 7-million-record database attributed to the luxury brand LOHONO. At this scale the dump would include customer PII and transaction data valuable for fraud and phishing. Large e-commerce leaks remain a primary source for downstream account-takeover attacks.