BRIEFLeakhighP48
French database of 905,000 license plates with PII for sale
Detected30 October 2026 · 05:24 UTC
An actor is advertising a dataset of roughly 905,000 French vehicle license plates bundled with associated personally identifiable information. If authentic, this is a large-scale privacy exposure enabling identity fraud, vehicle tracking and targeted scams against French residents. The thread is posted on a PwnForums onion mirror and is login-walled, so the seller and sample have not yet been verified; defenders should treat it as a credible large PII sale pending confirmation.
CategoryLeak
Severityhigh
Priority score48
Detected30 October 2026 · 05:24 UTC
Leak● 47
Vista previa de brecha de Wonder Rates con SSN y datos fiscalesA DarkForums actor is advertising a breach preview of Wonder Rates Brokerage containing SSNs, driver's licenses, tax and income records and financial details. Such data enables identity theft, loan fraud and account takeover, and the 'preview' format signals an imminent full sale or leak. Financial firms and identity-monitoring teams should watch for circulation of these records.Leak● 58
Filtración de la base de datos de Iraqi Airways en DarkForumsA DarkForums user posted, on October 30, 2026, a database allegedly belonging to Iraqi Airways, Iraq's national carrier. A national airline holds passenger PII, booking records and potentially sensitive travel data, making it a high-value target for fraud and phishing. Even if partial, the leaked records enable account takeover and follow-on social engineering.Leak● 54
Base de datos de 555.000 propietarios franceses a la ventaA PwsForums seller (Dedale) is offering a 555,000-record dataset described as French homeowner data, with the thread bumped within the last hours. The volume and the property-owner framing point to PII such as names, addresses and contact details rather than credentials, likely aggregated from real-estate or public records sources. Such lists enable high-quality phishing, impersonation and physical-risk targeting of French residents, and should be tracked even though no specific organisation is named.Leak● 62
Base de datos de ETFdb/VettaFi con 60 millones de registros a la ventaA seller on PwsForums is advertising a database attributed to ETFdb.com/VettaFi claiming 60 million records covering roughly 270,000 users, sold in the marketplace section. VettaFi is a US financial-data and indexing provider whose platforms serve asset managers and advisors, so the data may include professional contact details, subscription data and hashed credentials of financial-sector users. Large financial-data leaks are valuable for BEC, credential stuffing against investment platforms and follow-on social engineering of advisors.Leak● 48
Base de datos del DHS de EE.UU. ofrecida para descargaA thread on the Spear forum markets a downloadable database attributed to the US Department of Homeland Security; the body is login-restricted, so scale and authenticity remain unverified. Claims of this kind are often recycled or fabricated, but a genuine DHS-linked dataset would affect federal security operations and contractor data. It should be tracked as an unverified high-value leak claim pending validation.Leak● 52
Leak de 12,9 millones de credenciales URL:LOG:PASS en DarkForumsA user named Kovnonos published a 12.9 million-line URL:LOG:PASS corpus on DarkForums on 19 October 2026, described as private and high quality. The format indicates stealer-log style data pairing login URLs with plaintext credentials, which fuels credential stuffing and initial access against web portals. Because it is a mixed multi-site dataset, any organization with public login portals should check for its own domains inside the leak.