BRIEFLeakhighP46
Database of 102,000 German gambling users for sale
Detected30 September 2026 · 21:32 UTC
A seller is offering a database of roughly 102,000 German gambling users dated September 2026. Gambling accounts typically carry KYC identity and payment data, valuable for fraud and targeted abuse. It is a fresh, sizable leak outside Latin America, relevant for fraud and regional tracking teams.
CategoryLeak
Severityhigh
Priority score46
Detected30 September 2026 · 21:32 UTC
Leak● 42
Filtración de imagen de máquina virtual de CryptoExchange.comAn administrator posted a VM image of CryptoExchange.com in Spear's leaked-tools section, which could expose exchange infrastructure, configs or stored credentials. A leaked VM for a financial/crypto platform is high value for follow-on intrusion and fund theft. The post dates to early January 2026, so it is not a fresh alert but still worth tracking.Leak● 48
Filtración de bases de datos de múltiples sitios suizos (beesolutions.ch)A thread on BreachForums advertises 'Multiple-Swiss-Site databases' from intranet.beesolutions.ch, indicating data from several Swiss web properties was exfiltrated and is being circulated. The exact record count and date are unclear, but stolen databases of corporate intranets feed credential reuse and business-email-compromise. It is relevant as a real organizational leak, though outside the LATAM focus.Leak● 68
Base de datos de la Universidad Tecnológica de Tula-Tepeji (México) publicadaA full database belonging to a Mexican public university (UTTT, Hidalgo) is being offered on DarkForums, likely containing student, staff and institutional records. This is a Latin American education-sector breach that enables credential stuffing, targeted phishing of .edu.mx accounts and identity fraud. Defenders in MX academic/critical-infra should watch for downstream abuse of exposed accounts.Leak● 52
Venta de 549.000 cuentas de compras de ZalandoA seller is offering 549,000 records of Zalando shopping/account data billed as fresh 2026 private data with many valid hits. Zalando is a major European e-commerce retailer, so these credentials enable account takeover and payment fraud. Bulk availability of verified hits raises the risk of credential-stuffing against the retailer and its customers.Leak● 58
Filtración de base de datos de Serasa Experian (Brasil)A database attributed to Serasa Experian, Brazil's largest credit bureau, has surfaced on DarkForums. It exposes consumer credit and personal data tied to a critical Latin American financial-infrastructure provider serving thousands of lenders. The post appears dated February 2026, so it is a re-surface rather than a fresh breach, but the entity's systemic importance warrants monitoring.Leak● 52
Filtración de base de datos de CarMaxA leak of CarMax, a large US used-car retailer, was posted to DarkForums moments ago. CarMax holds customer PII and financing/credit-application data, making the records valuable for identity theft and loan fraud. Because it is freshly posted, it warrants rapid verification and monitoring.