BRIEFLeaklowP45
Sample of 900K stealer-harvested credentials posted
Detected28 August 2026 · 00:16 UTC
A free sample of 900,000 URL:LOG:PASS lines from the Plutonium stealer was posted on a darknet forum. These credentials were likely harvested from infected devices and can be used for account takeover or further intrusions. Organizations should check the sample against their exposed domains and enforce credential reset and remediation.
CategoryLeak
Severitylow
Priority score45
Detected28 August 2026 · 00:16 UTC
Leak● 56
Base de datos de inversores cripto de España a la ventaA threat actor is advertising a freshly compiled database of Spanish cryptocurrency investors on a dark web forum. This kind of targeted dataset enables phishing, SIM-swap and account-takeover campaigns against high-value individuals. Spanish crypto and financial-sector defenders should watch for downstream fraud and credential abuse.Leak● 52
Filtración masiva con 1,1 millones de perfiles de pacientes en EE. UU.A BreachForums seller is offering a database of 1.1 million US patient profiles, a large healthcare data breach. Medical records are highly sensitive and drive insurance fraud, identity theft and targeted phishing against patients and providers. The victims are in the US, so regional priority is lower, but the scale warrants monitoring of downstream abuse.Leak● 68
Filtración de base de datos con 780.000 registros de BrasilA threat actor dumped a database of 780,000 Brazilian records, advertised as part one of a Latin America series, on a leak forum. Personal data on Brazilian citizens fuels phishing, fraud and credential-stuffing against regional users. LATAM defenders should assess exposure and watch for the follow-up parts covering other countries.Leak● 26
Filtración de datos de la minorista francesa La Redoute (~100K)A database reportedly holding around 100,000 records of French fashion retailer La Redoute was shared on a leak forum, exposing customer names, emails and likely addresses. Leaked retail data of this size feeds phishing, account takeover and card-not-present fraud. It is off-region and dated May 2026, so it is background context rather than a fresh alert.Leak● 30
Filtración de la base de datos de la tienda francesa WOOPIT.FR (256K)A 256,000-record database of French e-commerce site woopit.fr was posted on a leak forum, exposing customer order and contact data. It matters because such records enable credential stuffing, phishing and fraud against the victims. However it is dated June 2026 and outside Latin America, so it is informational rather than an urgent alert.Leak● 50
Base de datos de qudify.co (2 millones) a la ventaA 2-million-record database attributed to qudify.co is being offered by a bulk database reseller. Details on the organization and data fields are scant, so impact is uncertain, but the size is consistent with a substantial customer or account dump. Worth a low-priority verification pass rather than a hard alert.