BRIEFLeaklowP28
Repost: 3 million US debit records for sale
Detected18 October 2026 · 12:26 UTC
Reposts collapsed2
A 3M-record US debit-leads dataset was reposted on BreachForums, dated 31 May 2026. It is a repost of already-circulated financial leads rather than a new breach, limiting its freshness. Still relevant for fraud-monitoring teams tracking exposed cardholder/debit data, but not a new alert.
CategoryLeak
Severitylow
Priority score28
Detected18 October 2026 · 12:26 UTC
Leak● 37
Filtración de 1,6 GB de registros de stealer del 18 de octubreA 1.6 GB 'fresh' infostealer log archive dated 18 October 2026 was posted publicly on underground forums. These logs contain browser-saved passwords, cookies and session tokens harvested from infected victim machines. Targets are unnamed and volume is moderate, but exposed session tokens can enable account takeover, so defenders can match their domains against the captured URLs.
Leak● 63
Filtración de 75 millones de credenciales URL:login:contraseñaA fresh 75M-record URL:login:password (ULP) stealer-log dump was posted dated 18/10/2026. Credentials are plaintext pairs usable directly for credential stuffing and ATO across many services. No single org is named, but the scale makes it a prime source for defenders to hunt leaked internal and customer accounts.Leak● 38
Filtración de 2,5 millones de cuentas de usuarios de SpotAngelsA database attributed to the parking app SpotAngels, roughly 2.56 million user accounts, is being offered as a free download. Such volumes typically include email addresses, password hashes and location or vehicle-related data, which fuel credential stuffing, phishing and physical-location inference. It is a commercial consumer service rather than critical infrastructure and the post appears to be a redistribution, so priority is moderate.Leak● 40
Base de datos de la operadora Asiacell ofrecida en foro de hackingA hidden-service forum thread advertises a database belonging to Asiacell, one of Iraq's largest mobile operators serving millions of subscribers. The content sits behind a login wall, so scale, fields and authenticity are unconfirmed, but a telecom subscriber dump would expose identifiers, contact data and potentially SIM-related records useful for fraud and account takeover. Telecom leaks also feed SIM-swap and smishing campaigns beyond the country of origin.Leak● 50
A la venta documento interno de SpaceX sobre la constelación StarshieldA seller on a carding forum is offering what is described as a SpaceX internal technical baseline and architecture description for the Starshield military satellite constellation. If authentic, it exposes design and capability details of a defense-linked system used by US government customers. Treat it as unverified and likely a scam, but any real leak of this material is relevant to defense and space-sector threat monitoring.Leak● 38
Base de 672k contactos profesionales de Wuzzuf a la ventaA forum user is selling a 672k-record database of wuzzuf.net, an Egyptian recruitment platform, said to contain emails, phone numbers and user profiles. It is a real, sizable professional-contacts leak useful for phishing and credential-stuffing campaigns. Not region-critical, but a notable PII exposure worth tracking for downstream targeting.