BRIEFLeakhighP72
Mass General Brigham patient data leak of 4M rows
Mass General Brigham Health Plan
Detected3 October 2026 · 22:55 UTC
A DarkForums post advertises patient data from massgeneralbrighamhealthplan.org totaling about 4,054,031 data rows and 176,346 emails. This is a large leak of a major US health insurer, high value for fraud and credential abuse. Defenders should flag exposed patient identities, emails and insurance data.
CategoryLeak
Severityhigh
Priority score72
Detected3 October 2026 · 22:55 UTC
Leak● 42
Filtración de datos del servicio anti-bot DoubleCounter.ggA breach of DoubleCounter.gg, a Discord anti-alt and verification service, was posted on 11 October 2026. The platform stores user IDs, IP addresses and verification metadata for many communities, so the leak can expose linked accounts and infrastructure details. It is niche and non-regional, but fresh and could feed downstream account and fraud attacks.Leak● 44
Base de datos de 2 millones de suscriptores móviles de Indonesia a la ventaA seller is offering a database of 2 million Indonesian mobile subscribers reportedly derived from SIM-card registration records, including identity and phone data. This is a large telecom dataset that enables SIM-swap, fraud and identity theft at national scale. It sits outside the LATAM region, so it is relevant as a sizeable national telecom leak but not a regional alert.Leak● 58
Base de datos de 40 millones de clientes de Payback Alemania a la ventaActor 'Koshyrman' is selling a 40-million-record database belonging to Payback, a major German loyalty and payments program. Such a leak exposes extensive customer PII (names, addresses, emails, phone numbers) and enables mass phishing, credential stuffing and account takeover. It is outside Latin America, but its scale and recency make it a credible large-breach sale worth tracking.Leak● 50
Datos de clientes de Binance Australia a la ventaA RaidForums seller is offering a dump of Binance Australia customer data for sale. Compromised exchange records expose account holders to targeted phishing, credential stuffing and SIM-swap fraud. Security teams at the exchange and its customers should watch for follow-on account-takeover and social-engineering campaigns.Leak● 55
Base de datos de 109.392 usuarios de Coinbase a la ventaA RaidForums seller is offering a database of 109,392 Coinbase accounts with balances attached, indicating compromised credentials of real users. Such records fuel targeted phishing, credential stuffing and account takeover against crypto holders, who face direct financial loss. Defenders should treat it as a credential-leak signal and push MFA and password resets to affected accounts.Leak● 25
Filtración de datos de la alimentaria brasileña Integra FoodsA database from the Brazilian food company Integra Foods (integrafoods.ind.br) was posted on a leaks forum. The thread is dated July 2023, so this is stale material rather than a fresh incident. It is included only for correlation, not as a new alert.