BRIEFLeaklowP45
Massive leak of 110 million credentials from stealer logs
Detected8 October 2026 · 17:21 UTC
A 110-million-record URL:login:password dump sourced from stealer logs was posted, likely aggregated infostealer output rather than a single breach. While it names no victim, its sheer volume hands attackers a large pool of valid credentials for credential-stuffing against corporate and government accounts worldwide. Defenders should enforce MFA and monitor for reuse of credentials originating from this dump.
CategoryLeak
Severitylow
Priority score45
Detected8 October 2026 · 17:21 UTC
Leak● 52
Filtración masiva de 110M de credenciales URL:usuario:contraseñaA freshly dated dump claims 110 million URL:login:password stealer-log records, marked private and UHQ. Credential re-use makes this useful for account takeover, credential stuffing and initial access across many organizations. Despite being generic, its scale and recency warrant surfacing for defensive monitoring.Leak● 74
Filtración de datos de 7,5M de clientes de Momentum TelecomA freshly posted leak claims 7.5 million customer PII records from Momentum Telecom, including names and home addresses. Although the company is US-based, a dataset of this size is a high-value asset for fraud, SIM-swap and phishing campaigns. Defenders in telecom and downstream sectors should monitor for credential and identity abuse.Leak● 40
Base de datos de clientes de AT&T (correo y ubicación) publicadaA collection labelled as an AT&T customer base with email addresses and location data was posted on a leak forum. If authentic and current it would represent a large exposure of a US telecom subscriber base, but it may be a repost of earlier AT&T breach data, so its age should be verified before alerting. Telecoms are critical infrastructure, so any fresh customer-data leak warrants monitoring.Leak● 22
Base de datos de 23,5 millones de ciudadanos de Taiwán (2022) recirculadaA 23.5M-row Taiwan citizens database originally leaked in October 2022 is being recirculated. It is old, so not a fresh incident, but the scale and government-linked PII keep it valuable for identity fraud and social engineering. Treat it as historical context, not an active alert.Leak● 38
Combolist de 2,8 millones de credenciales filtradasA large 2.8 million-line ULP (email/password) combolist has been posted. While generic and undated, its size makes it useful for credential-stuffing campaigns against services with password reuse. Defenders should enforce MFA and monitor for reuse of these credentials on exposed logins.Leak● 40
Base de datos de 417.000 contactos de empresarios de EAU a la ventaA vendor is selling a 417k-contact database of UAE business owners, likely harvested from directories or registries. Business-contact lists fuel BEC, investment and phishing scams targeting executives. Low-technical but monetizable, it is worth noting for regional fraud monitoring.