BRIEFLeaklowP25
500k Gmail credentials list posted on forum
Gmail users
Detected26 August 2026 · 03:15 UTC
A thread on a Russian forum is sharing a combolist of 500,000 unique Gmail credentials dated 2026. Such lists are typically used for credential stuffing and can lead to account takeovers if users reuse passwords. While the exact source and freshness are unconfirmed, the volume merits a quick check for any overlaps with government or corporate domains.
CategoryLeak
Severitylow
Priority score25
Detected26 August 2026 · 03:15 UTC
Leak● 26
Filtración de datos de la minorista francesa La Redoute (~100K)A database reportedly holding around 100,000 records of French fashion retailer La Redoute was shared on a leak forum, exposing customer names, emails and likely addresses. Leaked retail data of this size feeds phishing, account takeover and card-not-present fraud. It is off-region and dated May 2026, so it is background context rather than a fresh alert.Leak● 30
Filtración de la base de datos de la tienda francesa WOOPIT.FR (256K)A 256,000-record database of French e-commerce site woopit.fr was posted on a leak forum, exposing customer order and contact data. It matters because such records enable credential stuffing, phishing and fraud against the victims. However it is dated June 2026 and outside Latin America, so it is informational rather than an urgent alert.Leak● 50
Base de datos de qudify.co (2 millones) a la ventaA 2-million-record database attributed to qudify.co is being offered by a bulk database reseller. Details on the organization and data fields are scant, so impact is uncertain, but the size is consistent with a substantial customer or account dump. Worth a low-priority verification pass rather than a hard alert.Leak● 54
Base de datos de Astroyogi (2,9 millones) a la ventaA seller lists a 2.9-million-record database from the Indian astrology platform Astroyogi. The likely contents are user emails, phone numbers and profile data, usable for spam and credential attacks. It is a mid-size consumer leak with limited strategic impact but worth tracking for affected-user alerting.Leak● 66
Base de datos de Hey Dude India (15 millones) a la ventaA 15-million-record dataset attributed to the footwear brand Hey Dude's Indian storefront is being sold online. The volume suggests a large trove of customer PII and possibly e-commerce account credentials, useful for credential-stuffing and phishing. Defenders monitoring the brand or its parent group should verify and pivot on affected email domains.Leak● 68
Base de datos de Tamimi Markets (6 millones) a la ventaA seller is advertising a 6-million-record database tied to the Saudi supermarket chain Tamimi Markets, posted on 13 October 2026. If genuine, it would expose customer identities and retail/loyalty data across a major Gulf retailer, fueling fraud and targeted phishing. Retail breaches of this scale also raise supply-chain and payment-fraud concerns.