BRIEFLeakhighP45
Database breach of Pakistani AI company Khaity published
Khaity
Detected21 September 2026 · 10:37 UTC
A database belonging to the Pakistani AI company Khaity has been published for free in 2026, exposing the firm's stored data. AI vendors typically hold client datasets and model/API material that can be abused for further attacks. Defenders in the AI supply chain should treat the exposure as a lead for credential reuse and downstream targeting.
CategoryLeak
Severityhigh
Priority score45
Detected21 September 2026 · 10:37 UTC
Leak● 24
Base de datos de 70 millones de AT&T ofrecida a la ventaA DarkForums post by user Abrtodor claims an AT&T database of 70 million records on 5 Nov 2026, but this closely matches the well-known 2024 AT&T breach and appears to be a recycled repost rather than new theft. It matters only as a reminder that such telecom customer data keeps circulating in criminal markets. Treat it as stale unless new fields or sample records prove otherwise.Leak● 42
Filtración de documentos confidenciales de un notario de BucarestA thread on NulledBB claims a leak of private and confidential documents from the Romanian notary office Notar-Bucuresti.ro. Notaries hold sensitive legal, identity and property records, so exposed files raise serious privacy and fraud concerns for clients. Defenders should verify scope and warn affected individuals about identity-theft and document-fraud risk.Leak● 58
Filtración de datos del bróker AvaTrade en EspañaA database tied to the online broker AvaTrade was posted on DarkForums by user Nympaxor on 5 Nov 2026. Because the target is a regulated financial services firm, exposed client identity and KYC data could enable account takeover, targeted phishing and fraud against investors. Defenders in Spanish-speaking finance should validate the dataset and warn customers to watch for credential-stuffing and impersonation.Leak● 58
Venta de datos de clientes del exchange Swyftx (Australia)The seller 'LeadsHouse01' is advertising a 'Swyftx Crypto Data 2026' dataset on DarkForums, referring to the Australian cryptocurrency exchange Swyftx. Although the listing gives no record count, a fresh 2026 customer dataset from a regulated exchange typically includes identity, contact and holdings information valuable for phishing and account takeover. Crypto users are prime targets for wallet-draining scams, so exposure should be treated as an active fraud risk rather than a generic leak.Leak● 93
Filtración de 31 GB del Poder Judicial de Lima Norte, PerúThe user 'Prymutir' published on DarkForums a 31.10 GB archive attributed to the Superior Court of Justice of Lima Norte, a Peruvian judicial body that handles criminal, civil and family cases. At that volume the dump likely contains case files, filings and personal data of litigants, employees and possibly judicial operators. A leak of a national judiciary is a high-value target for extortion, doxxing and follow-on fraud against citizens, and it is a direct reputational and legal risk for the Peruvian state.Leak● 45
Filtración de 3,46 GB de datos de Taiwán publicada en foroA 3.46GB archive labeled as a Taiwan data leak was published on DarkForums by a user. The listing does not detail the affected organization, but a leak of this size can hold personal or organizational records useful for fraud and intrusion. Taiwanese organizations should review it for exposure.