BRIEFLeaklowP45
536 GB of internal data from South Korean firm Nextwill for sale
Nextwill (nextwill.com)
Detected13 November 2026 · 13:13 UTC
A seller on the DarkForums leaks market is offering 536 GB of data attributed to Nextwill, a South Korean technology company (nextwill.com). The volume points to full file-server or backup exfiltration rather than a single application database. Partners and Korean tech firms should assume source code, contracts and customer records may be circulating.
CategoryLeak
Severitylow
Priority score45
Detected13 November 2026 · 13:13 UTC
LeakPriority 55
Venta de base de datos de SSN y licencias de conducir de EE. UU. (230 millones)A seller using the handle Leadstock is offering on the DarkForums Marketplace a claimed 230-million-record dataset of US Social Security Numbers and driver's licenses. Bulk identity data at this scale fuels synthetic-identity fraud, account takeover and loan fraud, and is routinely resold and cross-matched with other leaks. Defenders holding US customer identity records should treat exposure as likely and tighten verification controls.LeakPriority 42
Filtración de base de datos de la Organización Iraní de Psicología y AsesoramientoA user 'hackersadism' posted on DarkForums a database of roughly 40,000 records attributed to the Iranian Psychology and Counseling Organization, a state-linked body that handles mental-health licensing and citizen records. Although the victim is outside Latin America, the dump is a named-organization leak with personal and possibly clinical data, which is useful for tracking reuse of the same data and for geolocation of Iranian-state exposure. It does not indicate any compromise of Argentine or Latin American government or critical infrastructure, so it is not a regional alert.LeakPriority 44
Venta de 21.000 documentos privados de una notaría de BucarestA seller on DarkNetArmy is offering about 21,000 private documents allegedly taken from notar-bucuresti.ro, a notary office in central Bucharest. Notary archives typically contain identity papers, powers of attorney and property records, which are highly useful for identity theft and fraud. The volume is modest and the post date is not clearly visible, so the priority is limited.LeakPriority 55
Venta de datos de la red corporativa de la auditora india Joisher & AssociatesA seller in the BreachForums sellers section is offering data allegedly extracted from the corporate network of the Indian audit firm Joisher & Associates. Audit firms hold client financial records, tax filings and internal correspondence, making such data a strong precursor for fraud and business email compromise. The post date is not visible, so freshness should be confirmed before any alerting.LeakPriority 68
Venta de datos de 800.000 pasajeros de Azerbaijan AirlinesA seller on the DarkForums marketplace is advertising roughly 800,000 passenger records allegedly taken from Azerbaijan Airlines (azal.az), including upcoming flight information. If genuine, the dataset exposes names, contact details and travel itineraries of travellers, enabling targeted phishing, fraud and physical-risk profiling. Airline data is also valuable for account-takeover against loyalty and booking systems.LeakPriority 50
Filtración de documento técnico interno de la constelación Starshield de SpaceXA document titled as the Starshield Constellation Technical Baseline and Architecture is being distributed on the BlackBones forum. Starshield is SpaceX's defense-focused satellite line tied to US national security programs, so leaked architecture details could aid adversaries in understanding sensitive capabilities. Even unverified, defense contractors and government space stakeholders should assess exposure.