BRIEFLeakhighP45
Massive Chinese data leak claiming 50 billion+ records
Detected19 September 2026 · 12:12 UTC
A compilation claiming over 50 billion leaked Chinese records is circulating in 2026. If genuine, it would be one of the largest credential and PII collections seen, enabling mass credential stuffing. Much of it is likely aggregated from prior leaks, so defenders should treat it as recycled-but-dangerous rather than a brand-new breach.
CategoryLeak
Severityhigh
Priority score45
Detected19 September 2026 · 12:12 UTC
Leak● 40
Datos de las policías de Abu Dhabi y Dubái a la venta en un foroA DarkForums thread claims to hold data attributed to the Abu Dhabi and Dubai police forces, published behind a login wall with no visible sample or record count. If genuine, law-enforcement personal data or case information can enable targeting of officers, extortion and social engineering against police systems. The claim is unverified and undated, so it is worth monitoring rather than escalating.Leak● 57
Base de datos de vehículos del gobierno de Sindh, Pakistán, en ventaA DarkForums listing offers a Sindh government vehicle database with a claimed 10.6 million records, likely covering registrations and owner details held by a provincial authority. Exposure of a national-scale vehicle registry supports identity fraud, vehicle cloning and targeting of owners, and is a strong indicator of unpatched exposure in public-sector systems. The thread is login-walled, so scale and freshness remain unverified.Leak● 71
Filtración de datos de estudiantes de la Universidad UDI en ColombiaA DarkForums thread advertises a data leak from the Universidad de Investigación y Desarrollo (UDI) in Bucaramanga, Colombia, affecting student records. University databases typically contain national IDs, addresses, contact details and academic information that fuel identity theft and credential-stuffing against students and staff. Because the post is not clearly dated, it should be verified quickly to establish whether the dump is new or a re-release.Leak● 78
Base de datos del club exclusivo La Reserva de Sotogrande a la ventaA DarkForums actor is advertising a 2026 database attributed to La Reserva Club Sotogrande, a high-end golf and residential club in southern Spain, claiming over 31 million records of wealthy clients. Even discounting inflated counts, exposed names, contact details and membership data of high-net-worth individuals enable targeted phishing, fraud and physical-security risks. Defenders at premium hospitality and private-membership organizations should treat this as a priority lead for credential and client-data exposure.Leak● 38
Datos de brecha 2026 con leads cripto de 21Bitcoin a la ventaA BreachForums seller lists what is described as 2026 breach data containing crypto leads for 21Bitcoin, a European Bitcoin brokerage app. If genuine, the records give attackers verified emails and account associations useful for phishing and account takeover against retail crypto users. Volume, sample and proof were not visible, and the same seller posts multiple vague crypto lead listings, so authenticity is doubtful.Leak● 60
Venta de 700.000 registros de leads cripto de CoinbaseA BreachForums Place Leads Market seller is advertising 700,000 crypto-related leads attributed to Coinbase, a major exchange whose customer data fuels phishing, account takeover and SIM-swap fraud. Even if the set is partially aggregated rather than a direct breach, verified exchange user records are high-value for credential stuffing and social engineering against account holders. The listing date and a data sample were not visible, so provenance and freshness remain unverified.