BRIEFLeakhighP52
Alleged GameStop breach exposes 56 million records
GameStop
Detected16 September 2026 · 17:12 UTC
A BreachForums thread discusses an alleged GameStop data breach exposing more than 56 million customer records. If verified, the dataset carries customer PII that fuels phishing and credential-stuffing, so defenders should watch for account-takeover and fraud campaigns built on it.
CategoryLeak
Severityhigh
Priority score52
Detected16 September 2026 · 17:12 UTC
Leak● 26
Reaparece base de datos de 419 millones de InstagramA 419 million-record Instagram dataset reappeared on BreachForums on 16 September 2026, most likely a repackaged older scrape rather than a new incident. Such large identity/credential sets still feed credential stuffing and OSINT, but this is a recycled leak, not a fresh compromise.Leak● 42
Filtración de la base de datos completa de NowVerticalA full database of NowVertical, a data-analytics and data-brokerage firm, was offered on BreachForums on 16 September 2026. Firms of this type aggregate sensitive business and client data, so a leak can expose partner identities and credentials usable for targeted intrusion.Leak● 45
Venta de la base de datos completa de better.org.ukA seller posted the full database of the UK leisure operator better.org.uk on 09 September 2026. A complete dump of a real membership organisation enables phishing and credential-reuse attacks against staff and members, so it is worth monitoring even outside the region.Leak● 44
Filtración de base de datos del departamento de economía de la Academia Kyiv-MohylaA database belonging to the economics department of Ukraine's Kyiv-Mohyla Academy (economics.ukma.edu.ua) has been posted on a raid forum, likely with staff and student personal data and credentials. The post dates to mid-2026, so it is not fresh. It is outside Latin America but remains a real education-sector breach worth tracking for credential reuse.Leak● 68
Venta de volcado completo de la plataforma de datos Woflow (12M registros)A full dump of Woflow, a US AI-driven merchant data platform, containing roughly 12 million records, is being offered on a raid forum in 2026. Merchant and business contact data at this scale fuels targeted phishing, account takeover and B2B invoice fraud. Defenders in e-commerce/payments should treat the dataset as live and hunt for credential reuse.Leak● 28
Base de datos de CPF y datos personales de brasileños a la ventaA DarkForums post is offering a database of Brazilian CPF numbers together with personal details of citizens. The dump is not recent (early 2025) and the scale is unstated, but CPF-linked identity data can fuel fraud, account takeover and synthetic identities. It remains marginally relevant for LATAM defenders because the exposed PII persists long after posting.