BRIEFLeakhighP60
Claimed Binance 2026 documents and user data leak
Binance
Detected31 October 2026 · 11:24 UTC
A DarkForums user (Raxmusen) posts what is claimed to be Binance internal documents and customer data under a 'Binance leak 2026' thread. If authentic, exposed KYC-style records of a major exchange fuel SIM-swap, account-takeover and extortion attempts against crypto users, including many in Latin America. Claims of this kind are often recycled, so verification of the sample's freshness is essential before alerting.
CategoryLeak
Severityhigh
Priority score60
Detected31 October 2026 · 11:24 UTC
Leak● 45
Filtración de 200 millones de credenciales de correo de X (Twitter)A DarkForums post claims to leak 200 million X (Twitter) email and password pairs, reportedly dated 2026 though it may recycle a known older Twitter dataset. Large credential dumps fuel credential-stuffing against users who reuse passwords. Organizations should enforce credential monitoring and warn staff whose emails appear in such leaks.Leak● 70
Base de datos de salud de España con 2,2 millones de registros a la ventaA DarkForums seller (SpartanX) is offering a Spanish health-sector database labeled 'Health Time' containing 2.2 million records, posted on 23 October 2026. Health data carries high identity-theft and regulatory risk (GDPR/LOPDGDD) for patients and providers. Spanish healthcare entities and their partners should verify exposure and monitor for downstream fraud.Leak● 40
Presunta base de datos de 820 millones de usuarios de Alipay a la ventaA DarkForums thread by user Vinkeval claims to offer a full database of 820 million Alipay users, one of the largest payment platforms in China. Claims of this scale on Alipay have circulated for years and are frequently recycled or fabricated, so the sample needs validation before any conclusion about real exposure. If genuine, it would be among the largest credential and identity leaks ever seen in fintech.Leak● 46
Base de datos del Observatorio Parlamentario de Irak filtradaA DarkForums user (Zarlotor) publishes a database attributed to the Iraq Parliamentary Observatory, a legislative-monitoring body. Exposed records of parliamentary staff, contacts and monitoring work can support social engineering against legislators and interference operations. The volume and verification level are unclear, but it is a fresh government-adjacent leak worth cataloguing.Leak● 62
Filtración gratuita de datos de la aerolínea Plus UltraA DarkForums post offers for free a data set belonging to Plus Ultra, the Spanish airline operating routes to Venezuela and other Latin American destinations. Airline data typically includes passenger identities, itineraries and contact details, useful for phishing and travel-fraud campaigns across Spain and LatAm. The release being free maximises downstream abuse, so regional airlines and travel-sector defenders should assess quickly.Leak● 68
Base de datos de clientes del club La Reserva de Sotogrande a la ventaA DarkForums actor (Zynxeutov) advertises an 'exclusive 2026' database of La Reserva Club Sotogrande, a high-end golf and real-estate club in southern Spain, claiming data on wealthy clients. If genuine, it exposes high-net-worth individuals' contact and membership details, a prime target list for phishing, fraud and extortion. Defenders and private-banking/real-estate partners in Spain should verify exposure and warn affected clients.