BRIEFLeakhighP50
10M PII records from South Africa's Thrive Online Group for sale
Thrive Online Group (Sudáfrica)
Detected19 October 2026 · 21:39 UTC
A seller lists roughly 10 million PII records belonging to South Africa's Thrive Online Group for sale on a private forum. The volume and personal-data nature make it valuable for identity theft and large-scale phishing against South African consumers. Details are login-walled, so scope and recency still need independent confirmation.
CategoryLeak
Severityhigh
Priority score50
Detected19 October 2026 · 21:39 UTC
Leak● 55
Filtración de datos de cointracker.ioA DarkForums poster claims a leak of the cryptocurrency portfolio-tracking service cointracker.io, published roughly eight hours ago. Such a leak could expose user emails, wallet-linked holdings and account data, raising phishing, account-takeover and targeted-theft risk for crypto holders. Fresh and tied to a named real service, so worth validating the dataset sample and size.Leak● 56
Venta de bases de datos brasileñas en BreachForumsA seller in BreachForums' marketplace is advertising an 'updated' set of databases sourced from Brazil, a LATAM jurisdiction of direct interest. If genuine, this represents bulk exfiltrated records of Brazilian organizations being monetized, enabling fraud, credential stuffing and downstream intrusion. The post is undated and vague on volume and victims, so scope needs confirmation before treating as fresh.Leak● 40
Filtración de datos del sitio gubernamental indio ICAR PuneA five-hour-old post claims a database leak from ataripune.icar.gov.in, a subdomain of India's agricultural research council. Government research portals often hold staff and research data useful for phishing and reconnaissance against public institutions. It is outside the Latin American focus but still a genuine government-domain exposure.Leak● 45
Base de datos filtrada del emisor iraquí de tarjetas QiCardA new DarkForums thread advertises a leaked database from QiCard, Iraq's main national payment-card provider. Compromised cardholder or subscriber data from a payment system carries direct financial-fraud and account-takeover risk. Scale and authenticity are not yet evidenced, so verification is required.Leak● 50
Venta de la base de datos de Motos del Oriente (Colombia)A seller is offering a database of about 207,000 records from the Colombian motorcycle dealer Motos del Oriente. Customer PII from a retailer supports phishing, credit application fraud and impersonation of buyers. It is a modest but regional leak worth tracking for Colombian consumer and financial-sector defenders.Leak● 55
Base de datos de 820 millones de usuarios de Alipay a la ventaA poster claims to hold a full database of 820 million Alipay users, a scale that would make it one of the largest financial-data leaks ever offered. Such claims are frequently recycled or exaggerated, so authenticity must be verified before action. If real, it would fuel massive credential-stuffing and payment-fraud campaigns globally.