PULSE
FEED
ransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Servicesransomn0n reclama a Company #117 · USransomn0n reclama a Company #116 · USransomn0n reclama a Company #115 · USransomn0n reclama a Company #114 · USransomn0n reclama a Company #113 · USransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Servicesransomn0n reclama a Company #117 · USransomn0n reclama a Company #116 · USransomn0n reclama a Company #115 · USransomn0n reclama a Company #114 · USransomn0n reclama a Company #113 · USransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerce
Kalir Brief · Item18 September 2026 · 12:12 UTC
BRIEFLeakhighP45

Massive leak of 16 million stealer credentials (Secretline.top)

Secretline.top

Detected18 September 2026 · 12:12 UTC
Why it matters

A 16 million-line URL:login:password dump attributed to Secretline.top stealer logs was reposted across several underground forums. Bulk stealer logs routinely contain corporate and government credentials that fuel account takeover and VPN/RDP intrusions. Volume is high but provenance and freshness are unverified, so treat it as context rather than a targeted alert.

MetadataRECORD
CategoryLeak
Severityhigh
Priority score45
Detected18 September 2026 · 12:12 UTC
Related items6
Leak● 55
Base de datos de 96,5 millones de usuarios de 1win a la ventaA DarkForums post advertises a November 2026 dump claiming 96.5 million 1win user records, a large gaming/betting platform. A dataset this size typically includes emails, hashed or plaintext passwords and account details valuable for credential stuffing. 1win is popular across Latin America, so exposed users there face account-takeover risk.
25m
Leak● 58
Filtración de 65 GB de datos de la empresa mexicana SertesA 65 GB database tied to the Mexican domain sertes.com.mx was advertised as leaked on DarkForums, exposing a large volume of a local company's records. Such dumps typically include customer and operational data useful for fraud and business email compromise. The exact date and contents are unknown, so verify scope before alerting.
25m
Leak● 65
Base de datos de la Corte Superior de Justicia de Lima NorteA 1.9 GB database attributed to Peru's Superior Court of Justice of Lima Norte was posted on DarkForums, suggesting judicial records and case-related personal data may be exposed. Judiciary systems contain sensitive citizen and legal information that is high value for fraud and extortion. Post lacks a clear recent date, so treat as a serious but possibly older exposure needing verification.
25m
Leak● 85
Filtración de base de datos del Congreso de ColimaBreachForums user 'skyling' posted a database allegedly belonging to the Colima State Congress in Mexico, making internal legislative records available. Government bodies hold sensitive personal data of officials, staff and citizens that can enable fraud and targeting. Mexican state institutions should treat this as a confirmed exposure and assess which datasets were leaked.
25m
Leak● 58
Filtración de 780.000 registros de Brasil, parte 1 de América LatinaA DarkForums thread advertises a 'Brazil BR 780K' dataset explicitly framed as part 1 of a Latin America collection, indicating staged releases of regional personal data. The body is login-walled, so the fields, source and currency of the records are unverified, but volume alone implies a consumer or customer database of a real organization. Defenders in Brazil should anticipate credential stuffing and phishing waves derived from this material.
5h
Leak● 76
Filtración de datos del Registro Civil de Mendoza (2024-2026)A DarkForums databases post advertises Registro Civil de Mendoza information spanning 2024, 2025 and 2026, i.e. birth, marriage, death and identity records held by an Argentine provincial government body. Civil registry data is high-value for identity theft, synthetic-ID fraud and social engineering against citizens and public offices. The thread appears closed or moved to removed content, which suggests takedown or stale repost but does not rule out copies circulating.
5h