BRIEFLeakhighP52
Data leak of Indian background-check firm First Advantage
First Advantage
Detected4 November 2026 · 16:24 UTC
Reposts collapsed2
A user named Gulravek is offering a downloadable leak of First Advantage, a background-screening company operating in India, on DarkForums. Such firms hold sensitive candidate and employee screening data, including identity and employment details. It matters for organizations whose workforce data may have been screened through this provider.
CategoryLeak
Severityhigh
Priority score52
Detected4 November 2026 · 16:24 UTC
Leak● 58
Base de datos de 31 millones de ciudadanos de Israel ofrecida en DarkForumsA user named Torramyr posted on DarkForums a dataset claiming 31.10 million records of Israeli citizens dated late October 2026. National citizen records typically combine identifiers, contact data and possibly more, enabling mass fraud and targeted attacks. Although outside Latin America, the scale makes it relevant for defenders tracking bulk identity exposure.Leak● 64
Filtración de 9 millones de registros KYC de BeatStarsA threat actor named Plaguinator is advertising a breach of BeatStars on DarkForums claiming 9 million KYC records. KYC datasets typically contain identity documents, addresses and financial details, making them high-value for fraud and account takeover. It matters for defenders monitoring identity-theft risk and for verifying whether real customer data is included.Leak● 88
Filtración de 5 millones de registros de Función Pública de Colombia (SIGEP)Actors on DarkForums are distributing an extracted database tied to Colombia's Función Pública (SIGEP), releasing 1 million records for free out of an alleged 5 million total. SIGEP holds public-employment and civil-service data, so exposure could reveal government employees' identities and account details. This matters for Colombian public-sector defenders assessing credential reuse and phishing against officials.Leak● 42
Publicación de una compilación de documentos no clasificados de la OTAN (2009-2024)A RaidForums thread, readable only after login, advertises a bulk compilation of NATO unclassified documents spanning 2009 to 2024. Because the material is unclassified, the impact is mainly aggregation and open-source exposure rather than disclosure of secrets. Analysts should verify authenticity and provenance before assigning any significance.Leak● 44
Base de datos con 363.752 perfiles personales de Nueva Jersey a la ventaA DarkForums seller offers 51,000 records that include credit card data plus 363,752 full personal profiles of New Jersey residents without card data. The combination of identity and payment information supports card-not-present fraud, account takeover and synthetic identity creation at scale. The volume suggests a consolidated regional breach rather than a small combolist.Leak● 56
Publicación de base de datos filtrada de MSI en DarkForumsOn 31 October 2026 a DarkForums user posted a thread advertising a leaked MSI (Micro-Star International) database. If genuine, the dump could expose corporate, partner or customer records of a major hardware vendor. Channel partners and distributors should watch for credential reuse and targeted phishing referencing MSI business relationships.