BRIEFLeakhighP55
Massive leak of 29.5 GB of ULP credentials
Detected21 July 2026 · 13:44 UTC
A 29.5 GB ULP (URL:LOG:PASS) dump is being distributed on SpyHackerz, representing a massive credential leak likely aggregated from multiple sources. The sheer volume of data increases the likelihood of containing credentials for high-value targets, including corporate and government accounts. This poses a significant risk for credential stuffing and further breaches.
CategoryLeak
Severityhigh
Priority score55
Detected21 July 2026 · 13:44 UTC
Leak● 66
Filtración de datos del contratista de defensa Rheinmetall DefenceA forum user is leaking data attributed to Rheinmetall Defence, a major European defence and arms manufacturer, posted within the last hours. Defence-sector leaks can expose supplier relationships, technical documents and partner networks across allied and LATAM procurement chains. Freshly posted, so time-sensitive for monitoring and attribution.Leak● 54
Filtración de documentos internos de la Autoridad Reguladora Nuclear de PakistánA forum thread (mirror of the same claim) advertises a 2026 set of internal safety and modification documents attributed to Pakistan's Nuclear Regulatory Authority. If genuine, it exposes sensitive material from a nuclear oversight body. Outside the region, but a high-impact critical-infrastructure leak worth tracking.Leak● 55
Filtración de documentos internos de la Autoridad Reguladora Nuclear de PakistánA darkweb post claims to offer a 2026 dataset of internal safety, meeting and modification documents from Pakistan's Nuclear Regulatory Authority. If authentic, it exposes sensitive operational material tied to a nuclear oversight body, useful for targeted intrusion or pressure. Outside AR-LATAM, but a notable critical-infrastructure leak to track.Leak● 42
Presunta filtración de bases de datos francesas de ENIA forum post reposts what are described as ENI French databases tied to the energy sector. The content is behind a login wall and appears to be a repost, so scope, authenticity and freshness are unverified. Energy-sector data touches critical infrastructure, so it is worth tracking despite the weak signals.Leak● 48
Base de datos de 5,4M de usuarios de dgshahr.com a la ventaA seller is offering a database from dgshahr.com, an Iranian digital credit service, claiming roughly 5.4 million users. The dataset likely contains account credentials and personal data, large enough to enable credential stuffing and fraud at scale. It matters as an example of a large regional breach even outside our primary focus area.Leak● 58
Base de datos del partido AKP de Turquía a la ventaA dark web forum post published within the last day offers a database belonging to Turkey's ruling AK Party. Political party databases typically contain member and supporter PII, donor data and internal contacts. If authentic, it can fuel phishing, doxxing and influence operations against a government-aligned organization.