BRIEFLeakhighP60
Massive credential leak from Secretline.top (9.5 million lines)
Secretline.top
Detected27 August 2026 · 18:16 UTC
A free dump on a leak forum contains 9,563,322 URL:login:password lines attributed to Secretline.top, likely collected by info-stealer malware. This credential volume poses significant account-takeover risk for users of the service. Organizations should scan the dump for corporate credentials and force password resets if impacted.
CategoryLeak
Severityhigh
Priority score60
Detected27 August 2026 · 18:16 UTC
Leak● 52
Filtración de base de datos de la firma argentina Abaco InformáticaA freshly posted DarkForums thread (minutes old) advertises a database allegedly belonging to the Argentine company abaco-informatica.com.ar. The dump could contain customer records or corporate credentials for a named Argentine organization. Defenders should validate the data and watch for credential reuse against related accounts and partners.Leak● 74
Filtración de 5,8 TB del puerto seguro mexicano (PSI)A threat actor on DarkForums is offering 5.8 TB holding 16.5 million confidential documents allegedly from Mexico's Smart Secure Port (PSI). Port, customs and logistics records are critical infrastructure, so trade, operational and personnel data may be exposed. Mexican authorities and LATAM defenders should verify the breach and prepare for follow-on fraud or extortion.Leak● 72
Base de datos de 5,3M de usuarios de Gemini.com a la ventaA threat actor claims to be selling a 5.3 million-record database tied to Gemini.com, a major cryptocurrency exchange. If genuine it would include customer PII and account data, carrying high risk of account takeover and phishing. The exchange and its users should verify and rotate credentials immediately.Leak● 50
Filtración de pedidos de la cartera cripto Bitbox.swissOrder data from Bitbox.swiss, a Swiss hardware crypto-wallet vendor, is being dumped on a forum. Hardware-wallet customers are high-value targets, so order records (names, addresses, purchases) enable targeted phishing and even physical attacks. Buyers of those devices should be warned.Leak● 58
Filtración de 6M de móviles alemanes con fecha de nacimientoA dataset of roughly 6 million German mobile numbers paired with dates of birth is circulating on a hacking forum. This PII combination enables identity fraud, SIM-swap targeting and credential-stuffing at scale. German telecom customers and anti-fraud teams should treat it as a fresh, high-value leak.Leak● 56
Base de datos de inversores cripto de España a la ventaA threat actor is advertising a freshly compiled database of Spanish cryptocurrency investors on a dark web forum. This kind of targeted dataset enables phishing, SIM-swap and account-takeover campaigns against high-value individuals. Spanish crypto and financial-sector defenders should watch for downstream fraud and credential abuse.