Private leak of 64M URL:login:password credentials

Detected19 September 2026 · 16:43 UTC

Why it matters

A private 64-million-line credential dump in URL:login:password (ULP) format was posted on 19 September 2026. Such stealer logs enable credential stuffing, account takeover and initial access across many organisations. Defenders should correlate it against authentication logs and enforce MFA.

MetadataRECORD

CategoryLeak

Severityhigh

Priority score58

Detected19 September 2026 · 16:43 UTC

Related items6

Leak● 38

Filtración de base de datos de la universidad ucraniana LNPUA database from LNPU, a leading Ukrainian university, was posted on DarkForums. University records typically include staff and student PII that is useful for phishing and fraud. Confirm authenticity and warn the institution.

35m

Leak● 52

Base de datos de los bancos iraníes Mellat y Melli a la ventaA database reportedly covering Iran's Bank Mellat and Bank Melli is offered for sale, posted minutes ago. Two large state-linked banks imply customer and account data at significant scale, useful for fraud and account takeover. Regional relevance to LatAm is limited, but it signals fresh large-scale financial-sector leakage.

35m

Leak● 44

Filtracion de base de datos de Noon (Egipto)A database belonging to Noon, a major Middle East e-commerce firm in Egypt, has been posted as leaked. Customer and order records from an e-commerce platform enable phishing, fraud and account takeover. Although outside LATAM, it is a fresh named-organization leak worth tracking.

55m

Leak● 59

Base de datos de 109.392 usuarios de Coinbase con saldo a la ventaA seller is offering a Coinbase dataset of 109,392 users with balances, indicating account-level financial data. Coinbase credentials and balance data fuel account takeover and targeted crypto theft. Exchange security teams should treat it as a live fraud and credential-stuffing risk.

55m

Leak● 60

Filtracion de base de datos de BitmainA database attributed to Bitmain, the dominant crypto-mining hardware vendor, has been posted as leaked on BreachForums. Such a leak could expose customer, partner and internal operational data. Bitmain's centrality to global mining makes any confirmed breach notable for supply-chain and financial defenders.

55m

Leak● 66

Filtracion de base de datos de ANTS (documentos de identidad de Francia)The 'ANTS' database, tied to France's national secure-documents agency, has allegedly been leaked and is being distributed on BreachForums. It likely contains sensitive identity and applicant records linked to passports and ID documents. If genuine, it poses a serious identity-fraud and national-security risk.

55m