BRIEFLeaklowP28
Alleged data leak and dox of BCA LTD exposed
BCA LTD
Detected13 September 2026 · 22:12 UTC
A forum post claims a data leak and dox of 'BCA LTD' exposing resident records, published under a user linked to Argentina (LaPampaLeaks). The organization, scope and record count are unclear, and the post is several months old. It is at most a low-priority lead pending verification of the entity and data.
CategoryLeak
Severitylow
Priority score28
Detected13 September 2026 · 22:12 UTC
Leak● 52
Getir y BiTaksi sufren filtración de 200.000 clientesA forum user posted a fresh dump of about 200,000 customer records from Getir and BiTaksi, two Turkish delivery and ride-hailing services. The data likely includes names, phone numbers and addresses useful for fraud and smishing. The post appeared on DarkForums around 26 October 2026.Leak● 55
Filtración de base de datos de Cultura.com con 2M de registrosA DarkForums user posted a database attributed to Cultura.com, the French cultural retailer, containing roughly 2 million records. Leaked customer data of this size enables credential stuffing, phishing and account takeover against the company's users. The post dates to 16 October 2026 and appears fresh.Leak● 56
Base de datos de Genesys Cloud Services filtradaA DarkForums post advertises a database attributed to Genesys Cloud Services, a major US contact-center and cloud provider used by many enterprises and public agencies. A leak here could expose customer records and integration secrets. Date and volume are unstated, so verification is needed.Leak● 62
Base de datos de NBCUniversal a la venta en DarkForumsA DarkForums seller posted a database claimed to belong to NBCUniversal (nbcuniversal.com), the US media conglomerate. Media companies hold large volumes of employee and partner data useful for phishing and business email compromise. The exact record count and date are not shown, so authenticity should be checked.Leak● 44
Combolist LUPIN de 30,4 millones de credencialesA VIP-section thread on the Spear forum, dated 29 October 2026 and titled 'LUPIN ULP 30 400 000', advertises roughly 30.4 million URL:login:password entries of global origin; the body is behind a login wall. At this scale the dump will feed credential stuffing against corporate VPNs, webmail and SaaS portals, including organizations in Latin America that reuse passwords. Treat it as a hygiene and detection problem rather than a targeted breach.Leak● 50
Base de datos de la revista Forbes publicada en foro criminalUser Torax2020 posted on DarkForums on 29 October 2026 a thread titled 'DATABASE Forbes', advertising a dataset attributed to the US business media outlet. The post gives no size, sample or proof, so scope is unconfirmed, but media subscriber and staff databases are routinely reused for credential stuffing and targeted phishing against journalists and corporate readers. Verify the claim and watch for resale or bundling into larger combolists.