BRIEFLeakhighP72
Massive Bullhorn data leak exposing 4.38 billion rows
Bullhorn
Detected5 November 2026 · 09:24 UTC
A 10TB dataset dubbed the Bullhorn attacks, roughly 4.38 billion rows of email and credential pairs, was posted on DarkForums by ROOTBOY. That volume is ready-made fuel for credential stuffing and account takeover across countless downstream firms. Defenders should assume mass password-reuse exposure and push resets plus MFA.
CategoryLeak
Severityhigh
Priority score72
Detected5 November 2026 · 09:24 UTC
Leak● 45
Filtración de 3,46 GB de datos de Taiwán publicada en foroA 3.46GB archive labeled as a Taiwan data leak was published on DarkForums by a user. The listing does not detail the affected organization, but a leak of this size can hold personal or organizational records useful for fraud and intrusion. Taiwanese organizations should review it for exposure.Leak● 47
Supuesta filtración de 200 millones de credenciales de X (Twitter)A DarkForums post by Vorjikin claims a 200 million-plus email:password dataset tied to X (Twitter). Credential dumps of this type are often recycled from earlier breaches but still enable account takeover and phishing at scale. X users and security teams should rotate passwords and confirm MFA.Leak● 58
Filtración de datos del proveedor sanitario Solventum (3M)A threat actor using the SeraphimGroup handle posted a data breach thread for Solventum, the healthcare company spun off from 3M, on DarkForums. Stolen medical-sector data raises risks of fraud and targeted phishing against patients and partners. Healthcare defenders should assess exposure and prepare notifications.Leak● 63
Base de datos de 31 millones de usuarios de ExploreTalent.com a la ventaA database of about 31.1 million records tied to ExploreTalent.com, a US talent-casting site, is offered on DarkForums. The trove exposes user account and profile data for a large audience, enabling phishing and account takeover. Defenders and affected users should monitor for leaked credentials and reset passwords.Leak● 60
Filtración de archivos de la Policía de BangladésA forum actor (Ilkrovek) posted leaked Bangladeshi Police files on DarkForums on October 31, 2026. Law-enforcement documents can contain officer identities, operational details and contacts, raising risks of doxxing and targeted attacks. Authorities should assess the scope and protect exposed personnel.Leak● 70
Filtración de datos del Ayuntamiento de Augusta (augustaga.gov)A threat actor (Raxtovor) posted a database leak reportedly belonging to the City of Augusta government domain augustaga.gov on DarkForums on October 31, 2026. Municipal .gov data can expose employee accounts, internal contacts and citizen records usable for phishing and account takeover. Government entities should verify the scope and rotate exposed credentials.