BRIEFLeakhighP53
400,000 UK and Ireland government and education emails for sale
UK and Ireland government and education organizations
Detected4 October 2026 · 10:55 UTC
A seller is offering 400,000+ institutional email addresses from UK and Ireland government and education organizations. The list enables targeted phishing and credential-stuffing against public-sector bodies. UK/Ireland gov and edu defenders should watch for follow-on phishing.
CategoryLeak
Severityhigh
Priority score53
Detected4 October 2026 · 10:55 UTC
Leak● 40
Combolist de 3,35 millones de credenciales de EspañaA 3.35 million-line email:password combolist targeting Spain is circulating on cracking forums. Large regional combolists drive credential stuffing against Spanish services and corporate accounts, even if the data is commodity. It is worth flagging for Spanish-speaking defenders to force resets and monitor login abuse.Leak● 58
Filtración del ERP Odoo de Tera.ma (Marruecos): 19.000 clientesA full 2.3 GB Odoo ERP dump from the Moroccan company Tera.ma was published as a complete leak, covering roughly 19,000 customers and 124,000 invoices. ERP data exposes financial records, invoices and customer PII in one bundle. It is relevant for defenders tracking Odoo-based company leaks and invoice-fraud follow-on activity.Leak● 66
Filtración de base de datos de clientes de CTT.pt (Portugal)A BreachForums seller posted a 2026 customer database of CTT, Portugal's national postal operator, dated October 5. Records from a national postal service enable targeted phishing and identity fraud against customers. Because it is dated this week, it should be triaged as a fresh leak rather than old data.Leak● 70
Venta de base de datos de SK Telecom, Corea del SurA seller is advertising a database of SK Telecom, South Korea's largest telecom operator, on DarkForums today. Telecom subscriber data enables SIM-swap, smishing and account takeover against millions of users. Fresh telecom leaks are high value because they fuel downstream fraud and identity theft.Leak● 72
Filtración gratuita de base de datos del banco HSBC (175.000 registros)A forum user is giving away a database they claim holds 175,000 HSBC Bank records, posted just minutes ago. Free releases propagate fast and are routinely reused for credential stuffing, phishing and account takeover. Even if partly unverified, the bank and its customers should treat it as a fresh exposure and monitor for reuse.Leak● 60
Base de datos filtrada de la logística india XpressbeesAn actor is distributing a leaked database from Xpressbees, an Indian courier and logistics company. Such data usually contains customer names, addresses, phone numbers and order details, valuable for phishing and fraud. The record count is unconfirmed, so treat it as a real but unsized commercial leak.