BRIEFLeaklowP47
Alleged 2026 data leak of the Apollo.io B2B database
Apollo.io
Detected31 October 2026 · 19:24 UTC
A DarkForums user posted on 31 October 2026 a thread advertising 'apollo.io leak 2026', claiming a dataset from the commercial B2B contact-intelligence platform Apollo.io. If genuine, the data would contain business emails, phone numbers and firmographic details used for sales prospecting, easing highly targeted phishing and account-takeover attempts. The claim is unverified and may be repackaged older data, but organisations that rely on this contact data should treat their business contacts as exposed.
CategoryLeak
Severitylow
Priority score47
Detected31 October 2026 · 19:24 UTC
Leak● 41
Base de datos de SquareTrade con 41 millones de registros ofrecida en descargaA breach forum thread, visible only by title, advertises a SquareTrade dataset described as 911,552 user accounts and 41,454,397 records as a free download. If accurate, the volume points to customer, order or claims data from the device-protection and warranty provider, which supports fraud and identity-theft schemes. The post may be a recycled or resold dump and cannot be verified from the login-walled content, but the record count warrants checking for exposure of customers and partners.Leak● 44
Base de datos de SoundCloud publicada en un foro criminalUser 'Nymrekar' posted on DarkForums on 31 October 2026 a thread titled 'Soundcloud database (as requested)', sharing what is presented as a dataset of SoundCloud user records. The content and volume are not visible, and such releases are often recycled collections of emails and hashes rather than a fresh breach. Either way, exposed email/password pairs for a large consumer platform feed credential-stuffing against unrelated services where users reuse passwords.Leak● 54
Filtración de 60 GB de datos del sitio guarufilme.com.brActor 'Vexy' published on DarkForums, on 31 October 2026, a roughly 60 GB leaked dataset attributed to the Brazilian website guarufilme.com.br. The volume suggests full backups, databases or user records rather than a small combolist, affecting a Brazilian digital-media company and its audience. Leaks of this size usually surface later in credential-stuffing against users and partners, so the exposure should be assessed and customer credentials treated as compromised.Leak● 22
Venta de base de datos del hosting israelí Aurion-HostingA DarkForums seller (chuu) listed the database of Israeli hosting provider aurion-hosting.co.il for sale, with the post dated June 13, 2025. The data is now well over a year old and the target is a small regional host outside the AR/LATAM focus, so it is stale rather than a fresh alert. It could still contain customer PII and account credentials useful for downstream attacks.Leak● 44
Base de datos de 1 millón de cuentas de Instagram de EE.UU. a la ventaA DarkForums user (Darhokin) posted on October 31, 2026 a claimed database of roughly one million US Instagram accounts. If authentic it exposes consumer credentials and profile data for US-based users rather than any government or critical-infrastructure entity. Defenders should treat it as a credential-stuffing and account-takeover risk, especially where passwords are reused.Leak● 42
Muestra de datos filtrados de AT&T publicada en DarkForumsDarkForums user Yiryupik posted an 'AT&T Leaked Sample' on 31 October 2026, offering only a fragment of records rather than a full dataset. Such samples are often recycled from previously reported telecom breaches, so novelty is uncertain. It still warrants checking whether the records are new, as telecom data feeds SIM-swap and account-takeover fraud.