PULSE
FEED
Kalir Brief · Item19 September 2026 · 03:12 UTC
BRIEFLeaklowP42

QIP.ru user database with 33.39M records for sale

QIP.ru

Detected19 September 2026 · 03:12 UTC
Why it matters

A seller is offering a 33.39 million record database of QIP.ru, a Russian messaging/email service. Large credential dumps like this fuel credential-stuffing and account-takeover campaigns across many services. The base is dated 2025 and sits outside the AR-LATAM context, so its direct impact for regional defenders is limited.

MetadataRECORD
CategoryLeak
Severitylow
Priority score42
Detected19 September 2026 · 03:12 UTC
Related items6
Leak● 52
Base de datos de un millón de usuarios de Crypto.com difundida gratisAn actor is offering a claimed one-million-record Crypto.com user database for free through the spear.cx forum. If authentic, it fuels credential stuffing, account takeover and phishing against cryptocurrency holders, a high-value fraud target. Authenticity and publication date are unverified, so it should be handled as a lead requiring validation.
14m
Leak● 66
Venta de dump completo de documentos de la Fiscalía General de UcraniaA seller on BreachForums is offering a full dump of private documents from the Ukrainian Prosecutor General's Office covering 2020-2026, advertised as an exclusive sale in the Leaks Marketplace section. If authentic, this is a large-scale exposure of internal government correspondence, case files and employee data of a national prosecution authority, valuable for espionage, targeting and influence operations. Defenders in government and law-enforcement sectors should treat it as a real breach until disproven.
3h
Leak● 45
Base de datos de 1 millón de usuarios de Crypto.com a la ventaA Niflheim World BHF thread advertises a claimed one-million-record Crypto.com customer database, a major global cryptocurrency exchange. The thread appears to be an older, bumped listing (low thread ID relative to current activity) with no clear recent date, so freshness is uncertain. Exposure of exchange KYC/customer data carries fraud and account-takeover risk, but this is neither LATAM government nor clearly a fresh breach.
4h
Leak● 48
Base de datos de un millón de usuarios de Crypto.com a la ventaA SpyHackerz post by 'databoss' (dated January 2026) advertises a database of roughly one million Crypto.com users. The data is several months old, so it is not a fresh alert, but it remains valuable for credential stuffing and phishing against crypto account holders. Teams handling crypto-related identity risk should treat it as a stale but real exposure.
5h
Leak● 74
Base de datos de representantes de SINACOL CENCOLAB MéxicoA DarkForums user (homercracker) posted a database of SINACOL/CENCOLAB representatives from Mexico in early November 2026. The dump likely contains names, contact and organizational details of representatives, valuable for targeted phishing, impersonation and social engineering against Mexican labor or health institutions. Affiliated organizations should assess the exposure of these individuals.
5h
Leak● 80
Filtración de 2 TB de datos del Gobierno de España por MortemTeamThe group MortemTeam is advertising a 2 TB collection of records attributed to the Government of Spain (Gobierno de España) on BreachForums, bundled with its own data bot. If authentic, it could expose citizen records, internal documents and ministry data, enabling targeted phishing and fraud against public-sector staff and citizens. Spanish public administration should verify exposure and monitor for data reuse.
5h