BRIEFLeakhighP42
Leaked database of Russian postal service Pochta.ru with 499K records
Pochta.ru
Detected21 September 2026 · 10:37 UTC
A 499K-row database from the Russian postal operator Pochta.ru has been shared on DarkForums, reportedly containing names, phone numbers and physical addresses. The dataset is valuable for phishing, smishing and identity fraud against Russian citizens. Even if partly recycled, defenders should flag it for credential-stuffing and mailing-fraud campaigns.
CategoryLeak
Severityhigh
Priority score42
Detected21 September 2026 · 10:37 UTC
Leak● 24
Base de datos de 70 millones de AT&T ofrecida a la ventaA DarkForums post by user Abrtodor claims an AT&T database of 70 million records on 5 Nov 2026, but this closely matches the well-known 2024 AT&T breach and appears to be a recycled repost rather than new theft. It matters only as a reminder that such telecom customer data keeps circulating in criminal markets. Treat it as stale unless new fields or sample records prove otherwise.Leak● 42
Filtración de documentos confidenciales de un notario de BucarestA thread on NulledBB claims a leak of private and confidential documents from the Romanian notary office Notar-Bucuresti.ro. Notaries hold sensitive legal, identity and property records, so exposed files raise serious privacy and fraud concerns for clients. Defenders should verify scope and warn affected individuals about identity-theft and document-fraud risk.Leak● 58
Filtración de datos del bróker AvaTrade en EspañaA database tied to the online broker AvaTrade was posted on DarkForums by user Nympaxor on 5 Nov 2026. Because the target is a regulated financial services firm, exposed client identity and KYC data could enable account takeover, targeted phishing and fraud against investors. Defenders in Spanish-speaking finance should validate the dataset and warn customers to watch for credential-stuffing and impersonation.Leak● 58
Venta de datos de clientes del exchange Swyftx (Australia)The seller 'LeadsHouse01' is advertising a 'Swyftx Crypto Data 2026' dataset on DarkForums, referring to the Australian cryptocurrency exchange Swyftx. Although the listing gives no record count, a fresh 2026 customer dataset from a regulated exchange typically includes identity, contact and holdings information valuable for phishing and account takeover. Crypto users are prime targets for wallet-draining scams, so exposure should be treated as an active fraud risk rather than a generic leak.Leak● 93
Filtración de 31 GB del Poder Judicial de Lima Norte, PerúThe user 'Prymutir' published on DarkForums a 31.10 GB archive attributed to the Superior Court of Justice of Lima Norte, a Peruvian judicial body that handles criminal, civil and family cases. At that volume the dump likely contains case files, filings and personal data of litigants, employees and possibly judicial operators. A leak of a national judiciary is a high-value target for extortion, doxxing and follow-on fraud against citizens, and it is a direct reputational and legal risk for the Peruvian state.Leak● 45
Filtración de 3,46 GB de datos de Taiwán publicada en foroA 3.46GB archive labeled as a Taiwan data leak was published on DarkForums by a user. The listing does not detail the affected organization, but a leak of this size can hold personal or organizational records useful for fraud and intrusion. Taiwanese organizations should review it for exposure.