BRIEFLeaklowP45
Full platform backup leak of DreamUp
DreamUp
Detected29 September 2026 · 22:07 UTC
A full platform backup of DreamUp was posted for download, dated 2026-01-04 and re-surfaced in June 2026. A complete backup typically exposes user accounts, password hashes and internal company data, enabling credential reuse and lateral movement. Defenders linked to DreamUp should assume compromise and hunt for re-used credentials.
CategoryLeak
Severitylow
Priority score45
Detected29 September 2026 · 22:07 UTC
Leak● 34
Filtración de 2,8 millones de registros de datos kurdos del norte de IrakA dataset described as 2.8 million records of northern Iraq Kurdish data was shared on a hacking forum. It likely aggregates personal and identity records from the region, useful for fraud and targeted phishing. It is outside the LATAM scope and undated, so it is marginal for regional defenders.Leak● 48
Filtración del backup completo de la plataforma DreamUpA full platform backup of DreamUp, an American ed-tech company, was leaked and posted to a leak forum. The dump appears to contain the entire platform database, exposing user accounts, credentials and personal data at scale. It is outside the LATAM scope and roughly three months old, so it matters mainly for credential-stuffing exposure and monitoring rather than immediate alerting.Leak● 42
Filtración de base de datos de la escuela de Hong Kong mckln.edu.hkThe ANKA Team posted a 235,000-record database belonging to Hong Kong school mckln.edu.hk. The leak exposes student and staff PII such as names, emails and likely credentials, enabling phishing and account takeover. It falls outside the LATAM region and has no clear date, so it ranks low for immediate alerting despite being a genuine education-sector breach.Leak● 40
Hackeo y filtración de la red de la Universidad Broward (EE. UU.)A threat actor claims to have hacked and leaked the virtual network system of Broward University in the United States. The dump could expose internal accounts, VPN/VLAN configuration and student records, enabling further intrusion. It is not a regional target and lacks a clear date, so it is only moderately relevant for a LATAM-focused defender.Leak● 32
Rehost de subconjunto de 7.9M de credenciales de ParkMobileAn actor rehosted a 7.9M email:password subset reportedly taken from ParkMobile's 21.9M-record breach. The data comes from a well-known older incident, so this is not a fresh compromise, but it remains useful for credential-stuffing and phishing against affected users. Treated as stale; low priority for immediate alerting.Leak● 68
Base de datos de Bank of America con 792k líneas a la ventaA seller on the DarkForums marketplace is offering a database allegedly tied to Bank of America containing roughly 792,000 lines, posted 26 September 2026. If authentic, it would expose customer PII and banking credentials usable for fraud, account takeover and credential-stuffing. Financial-sector defenders should verify exposure and watch for misuse of the listed data.