BRIEFLeakhighP78
Lucid Motors 5 TB engineering data and source code auction
Lucid Motors
Detected11 September 2026 · 19:12 UTC
An auction is listed for 5 TB of Lucid Motors engineering data and source code, indicating a serious corporate intrusion at the EV maker. Leaked source code and internal engineering data enable IP theft and follow-on attacks against products and suppliers. It matters for automotive and supply-chain defenders even though the victim is a US company.
CategoryLeak
Severityhigh
Priority score78
Detected11 September 2026 · 19:12 UTC
Leak● 28
Volcado de 44 GB con más de 60.000 archivos en NulledBBA 44 GB archive containing over 60,000 files was posted to the NulledBB dump section, potentially bundling large volumes of stolen or leaked data. The source and affected entities are not stated, so its relevance to any specific organization is unclear. Analysts should sample the archive and search for known corporate domains before dismissing it.Leak● 38
Combo privado de 11,7M URL:LOG:PASS circula en ForumTeamA private 11.7 million-line URL:LOG:PASS credential combo is being shared on the ForumTeam forum, giving attackers a large pool for credential-stuffing and account takeover against web-facing logins. No specific organization, sector or country is named, so the exposure is broad and untargeted. It still enables automated attacks against any service whose users reuse these credentials.Leak● 72
Filtración de base de datos de usuarios de 1win EcuadorA BreachForums user publishing as 'pheisito' posted a thread titled 'DATABASE 1WIN ECUADOR HACKEADO' on 27 October 2026, offering a customer database belonging to the betting platform's Ecuadorian operation. Although the exact record count is not visible, betting-platform dumps typically contain names, identity documents, phone numbers, emails and payment details of local users. For defenders in Ecuador this is a fresh, potentially large PII exposure that enables account takeover and identity fraud against a broad consumer base.Leak● 56
Oferta de intercambio de documentos internos de SpaceX en BreachForumsA BreachForums user is soliciting trades for what is described as internal SpaceX documentation, indicating stolen proprietary material from a major US aerospace and defense contractor is circulating in the marketplace. The post gives no date, sample or volume, so the authenticity and scale cannot be confirmed, but even partial internal documents from such a contractor can carry export-control and supply-chain risk. Organizations in the aerospace and defense supply chain should assume related technical and contractual material may be exposed and watch for targeted phishing using it.Leak● 62
Venta de acceso a 50 millones de líneas de datos francesesA forum seller on the PwnFrm onion board is advertising access to a corpus of roughly 50 million lines of French data, a volume consistent with a major aggregated breach or credential dump rather than a niche leak. The thread is login-walled so the exact source organizations, field structure and price are unverified, but records of this size typically include emails, passwords and personal identifiers. Defenders in France and any organization with French customer data should treat this as a possible exposure of their user base and prepare for credential-stuffing and phishing follow-on activity.Leak● 44
Venta de base de datos y documentos de identidad de CitiA NulledBB seller advertises a 'full company database', scanned identity documents (ID, driver's license, passport), and consumer information data tied to Citi. If genuine, this bundles identity-document data with account records, enabling account takeover and fraud. Verify the claim and monitor for misuse of customer identities.