BRIEFLeaklowP32
Rehost of 7.9M ParkMobile credential subset
ParkMobile
Detected29 September 2026 · 21:07 UTC
An actor rehosted a 7.9M email:password subset reportedly taken from ParkMobile's 21.9M-record breach. The data comes from a well-known older incident, so this is not a fresh compromise, but it remains useful for credential-stuffing and phishing against affected users. Treated as stale; low priority for immediate alerting.
CategoryLeak
Severitylow
Priority score32
Detected29 September 2026 · 21:07 UTC
Leak● 68
Base de datos de Bank of America con 792k líneas a la ventaA seller on the DarkForums marketplace is offering a database allegedly tied to Bank of America containing roughly 792,000 lines, posted 26 September 2026. If authentic, it would expose customer PII and banking credentials usable for fraud, account takeover and credential-stuffing. Financial-sector defenders should verify exposure and watch for misuse of the listed data.Leak● 30
Base de datos de usuarios de webgirl.vc filtrada en un foroA database belonging to the site webgirl.vc has been posted for download in the DarkForums leak section, minutes before this collection. If it holds account credentials and user records, it would enable credential stuffing and extortion against its user base. It is a fresh but low-profile leak for most defenders.Leak● 54
Filtración de datos del Ministerio de Infraestructuras de ItaliaDocuments and data from Italy's Ministry of Infrastructure and Transport flood-risk reduction system (SISTEMA DI RIDUZIONE RISCHIO ALLAGAMENTO) have been posted to a leak forum. Exposure of critical-infrastructure planning material eases reconnaissance and physical or cyber targeting of public-safety systems. It matters as a government-sector leak even though it falls outside Latin America.Leak● 58
Base de datos de 486M de contactos B2B de Apollo.io a la ventaA roughly 486 million record global B2B contact database attributed to lead-generation platform Apollo.io is being offered for sale on BreachForums. It contains business emails, names and company data that enable highly targeted phishing, credential stuffing and account-takeover attempts. Defenders should treat it as a fresh, large corpus of corporate targeting data.Leak● 22
Filtración de datos de múltiples operadores de telecomunicaciones (2023)A forum post aggregates leaked data from several telecom operators, a sector that is critical infrastructure. Such data enables SIM-swap, account takeover and subscriber targeting. However the post dates from 2023, so it is not a fresh alert and should be treated as background intelligence.Leak● 48
Filtración de base de datos de 235.000 registros de mckln.edu.hkThe ANKA team of TurkHackTeam posted a 235,000-record database leak from mckln.edu.hk, a Hong Kong educational institution. Student and staff personal data are likely included, including names and contact details. It matters as evidence of ongoing hacktivist-style bulk data dumping.