BRIEFLeaklowP38
541,000 credentials from Booking.com, Airbnb and travel sites leaked
Detected21 September 2026 · 00:37 UTC
A 541,000-line credential combolist targeting Booking.com, Airbnb and holiday-booking accounts is circulating, assembled from stealer logs. These credentials enable account takeover, fraudulent bookings and loyalty-point theft, and are frequently reused on corporate travel and mail accounts. Hospitality and travel firms should enforce MFA and watch for credential-stuffing.
CategoryLeak
Severitylow
Priority score38
Detected21 September 2026 · 00:37 UTC
Leak● 36
Filtración de datos de la Agencia Marítima de IndonesiaUser Niklorix posted on DarkForums an alleged leak of data from the Indonesian Maritime Security Agency on October 31, 2026. Government agency data can include personnel and operational information. Though outside Latin America, it shows targeting of maritime and security agencies, relevant to regional navies and coast guards monitoring similar activity.Leak● 40
Acceso a 310.500 registros del sitio tributario de IndonesiaUser Xanyuvor posted on DarkForums claiming access to 310,500 records from an Indonesian tax website. Tax authority data typically includes taxpayer identifiers and financial details. The large volume makes it notable for identity fraud and signals continued targeting of government revenue systems, though it falls outside the Latin America focus.Leak● 57
Filtración de base de datos de usuarios de 1Win EcuadorUser Pheisito posted a database labeled 1Win Ecuador on DarkForums on November 5, 2026. 1Win is an online betting platform, so the leak likely exposes player accounts and personal data. Though not critical infrastructure, gambling databases carry KYC and payment details useful for fraud and account takeover.Leak● 74
Filtración de base de datos de Diners Club EcuadorUser Pheisito published on DarkForums a database attributed to Diners Club Ecuador, a financial card issuer. Posted on November 5, 2026, the dump likely contains customer and cardholder records. Such leaks fuel card fraud and identity theft, so Ecuadorian financial institutions should treat affected data as compromised.Leak● 50
Filtración de 200.000 clientes de Getir y BiTaksiA DarkForums user ('Coltorix') posted a claimed new 200K customer dump from Getir and BiTaksi, Turkish delivery and ride-hailing apps. Such dumps expose phone numbers, addresses and order history usable for phishing and account takeover. It is a moderate-scale regional consumer breach rather than a critical-infrastructure event.Leak● 52
Filtración de 10 GB de datos de NestléA DarkForums post ('Kreztazal') advertises roughly 10GB of Nestlé corporate data. While Nestlé is a multinational outside LATAM scope, leaked corporate data can enable supply-chain targeting and B2B fraud affecting regional partners. Volume alone is moderate but worth verifying given the brand's global footprint.