BRIEFLeaklowP40
Massive 5TB leak of documents and SSNs
Detected16 October 2026 · 15:00 UTC
A carding forum promotes a free bot offering over 5TB of leaked documents, selfies, SSNs and personal data allegedly from a paid source. This aggregated identity data fuels synthetic identity fraud and account takeover at scale. It is a generic dump with no single victim, so relevance depends on which identities surface.
CategoryLeak
Severitylow
Priority score40
Detected16 October 2026 · 15:00 UTC
Leak● 45
Base de datos de 1M de cuentas de Instagram de EE.UU. a la ventaA seller posted roughly 1 million US Instagram credentials/records on a darkweb forum within hours, claiming a fresh database. If genuine it fuels credential-stuffing and account-takeover at scale, though such Instagram datasets are often recycled scrapes. Defenders should force resets and block credential reuse.Leak● 34
Filtración de base de datos del sitio de juegos chino DuowanA database for Duowan, a large Chinese gaming and community portal, has been posted for download. Gaming databases usually hold usernames, emails and hashed passwords that feed credential-stuffing attacks. Impact is largely limited to the platform unless reused credentials expose higher-value accounts.Leak● 20
Base de datos de AT&T de 2021 filtrada en un foroA forum thread offers the well-known AT&T 2021 customer database, an old breach that has circulated for years. It contains aging customer PII but is not a fresh incident, so it poses low immediate risk. It is useful mainly as context for credential-stuffing and exposure checks.Leak● 66
Base de datos de Turkish Airlines filtrada o a la ventaA seller is offering a database attributed to Turkish Airlines, a major international carrier, on a dark web forum. Airline databases typically hold passenger PII, booking and loyalty data that fuel phishing and fraud. Verification is warranted given the target's size and travel-sector exposure.Leak● 72
Filtración de datos de 1 millón de usuarios de Bank of AmericaA threat actor claims to have leaked data on roughly one million Bank of America customers, exposing personal and financial identifiers. If genuine, this volume of PII enables phishing, account takeover and fraud at scale. Financial-institution fraud teams should validate and monitor for downstream abuse.Leak● 58
Filtración de datos personales de la aerolínea Garuda IndonesiaA threat actor is advertising a PII dataset allegedly belonging to Garuda Indonesia, the state-owned national airline. Passenger and staff personal data from a national carrier is sensitive because it enables targeted phishing, identity fraud and social engineering against travellers and employees. Defenders should watch for credential-stuffing and impersonation campaigns leveraging airline data.