BRIEFLeakhighP85
Gruppo Spaggiari Parma database for sale
Gruppo Spaggiari Parma
Detected23 August 2026 · 22:15 UTC
An underground seller is offering 6.1 TB of personally identifiable information (PII) from Gruppo Spaggiari Parma for $50,000. The dataset likely includes customer and employee records, representing a massive breach of an Italian IT/software firm. While not in Latin America, the size and potential for follow-on attacks make it relevant for tracking major data exposures.
CategoryLeak
Severityhigh
Priority score85
Detected23 August 2026 · 22:15 UTC
Leak● 40
Base de datos de clientes de AT&T (correo y ubicación) publicadaA collection labelled as an AT&T customer base with email addresses and location data was posted on a leak forum. If authentic and current it would represent a large exposure of a US telecom subscriber base, but it may be a repost of earlier AT&T breach data, so its age should be verified before alerting. Telecoms are critical infrastructure, so any fresh customer-data leak warrants monitoring.
Leak● 45
Filtración masiva de 110 millones de credenciales de stealer logsA 110-million-record URL:login:password dump sourced from stealer logs was posted, likely aggregated infostealer output rather than a single breach. While it names no victim, its sheer volume hands attackers a large pool of valid credentials for credential-stuffing against corporate and government accounts worldwide. Defenders should enforce MFA and monitor for reuse of credentials originating from this dump.Leak● 22
Base de datos de 23,5 millones de ciudadanos de Taiwán (2022) recirculadaA 23.5M-row Taiwan citizens database originally leaked in October 2022 is being recirculated. It is old, so not a fresh incident, but the scale and government-linked PII keep it valuable for identity fraud and social engineering. Treat it as historical context, not an active alert.Leak● 38
Combolist de 2,8 millones de credenciales filtradasA large 2.8 million-line ULP (email/password) combolist has been posted. While generic and undated, its size makes it useful for credential-stuffing campaigns against services with password reuse. Defenders should enforce MFA and monitor for reuse of these credentials on exposed logins.Leak● 40
Base de datos de 417.000 contactos de empresarios de EAU a la ventaA vendor is selling a 417k-contact database of UAE business owners, likely harvested from directories or registries. Business-contact lists fuel BEC, investment and phishing scams targeting executives. Low-technical but monetizable, it is worth noting for regional fraud monitoring.Leak● 58
A la venta 100.000 registros de transacciones de PayPal de EE. UU.A seller is offering a database of roughly 100,000 US PayPal transaction records, posted fresh today on DarkNetArmy by an unverified account. If authentic, it exposes payment, identity and account data that enable fraud, account takeover and targeted phishing. Defenders should treat it as a potential leak of payment PII and monitor for reuse of the listed accounts.