BRIEFLeakhighP70
Data leak of 13,899 students from a Peruvian university
Universidad de Perú (no especificada)
Detected20 September 2026 · 17:37 UTC
A dataset claimed to belong to a Peruvian university was released for free, listing 13,899 students. Academic records typically contain names, DNI, institutional emails and enrollment data that enable credential-stuffing and phishing against students and staff. Peru's education sector should identify the institution, scope the exposure and force credential resets.
CategoryLeak
Severityhigh
Priority score70
Detected20 September 2026 · 17:37 UTC
Leak● 44
Base de 6 millones de móviles alemanes con fecha de nacimientoDarkForums user Tazrozen posted 6 million German mobile numbers with dates of birth on 31 Oct 2026. This combination of identifiers enables SIM-swap, smishing and KYC bypass against real users. German telecoms and any service relying on SMS OTP for these subscribers should assess exposure and strengthen verification.Leak● 48
Filtración de 82 millones de direcciones de Yuantong ExpressAn 82-million-record set of addresses and customer data from Chinese courier Yuantong Express (yto.net.cn) was posted on DarkForums on 5 Nov 2026. Parcel data exposes home addresses, phones and purchase patterns, enabling fraud and physical-risk targeting. Chinese logistics firms and e-commerce customers should treat these records as compromised.Leak● 55
Filtración de 5 millones de clientes del ISP turco TurknetDarkForums user ReichLeaks posted a 5.05-million-customer dataset from Turkish ISP Turknet on 5 Nov 2026, tagged as a re-hack. Telecom subscriber data enables SIM-swap, targeted phishing and account takeover for millions of users. Turkish ISPs and Turknet customers should verify the claim and prepare credential and notification responses.Leak● 82
Filtración de 7 millones de datos de clientes de Santander MéxicoA 7-million-record Santander Mexico dump was re-shared on DarkForums on 5 Nov 2026 with a 'new link', meaning the data keeps circulating freely despite being an older leak. Banking PII at this scale fuels account takeover, phishing and card fraud across Mexico. The bank and its customers should assume the data is public.Leak● 24
Base de datos de 70 millones de AT&T ofrecida a la ventaA DarkForums post by user Abrtodor claims an AT&T database of 70 million records on 5 Nov 2026, but this closely matches the well-known 2024 AT&T breach and appears to be a recycled repost rather than new theft. It matters only as a reminder that such telecom customer data keeps circulating in criminal markets. Treat it as stale unless new fields or sample records prove otherwise.Leak● 42
Filtración de documentos confidenciales de un notario de BucarestA thread on NulledBB claims a leak of private and confidential documents from the Romanian notary office Notar-Bucuresti.ro. Notaries hold sensitive legal, identity and property records, so exposed files raise serious privacy and fraud concerns for clients. Defenders should verify scope and warn affected individuals about identity-theft and document-fraud risk.