BRIEFLeaklowP55
US SSN and driver's license database (230 million) for sale
Detected13 November 2026 · 12:14 UTC
A seller using the handle Leadstock is offering on the DarkForums Marketplace a claimed 230-million-record dataset of US Social Security Numbers and driver's licenses. Bulk identity data at this scale fuels synthetic-identity fraud, account takeover and loan fraud, and is routinely resold and cross-matched with other leaks. Defenders holding US customer identity records should treat exposure as likely and tighten verification controls.
CategoryLeak
Severitylow
Priority score55
Detected13 November 2026 · 12:14 UTC
LeakPriority 42
Filtración de base de datos de la Organización Iraní de Psicología y AsesoramientoA user 'hackersadism' posted on DarkForums a database of roughly 40,000 records attributed to the Iranian Psychology and Counseling Organization, a state-linked body that handles mental-health licensing and citizen records. Although the victim is outside Latin America, the dump is a named-organization leak with personal and possibly clinical data, which is useful for tracking reuse of the same data and for geolocation of Iranian-state exposure. It does not indicate any compromise of Argentine or Latin American government or critical infrastructure, so it is not a regional alert.LeakPriority 44
Venta de 21.000 documentos privados de una notaría de BucarestA seller on DarkNetArmy is offering about 21,000 private documents allegedly taken from notar-bucuresti.ro, a notary office in central Bucharest. Notary archives typically contain identity papers, powers of attorney and property records, which are highly useful for identity theft and fraud. The volume is modest and the post date is not clearly visible, so the priority is limited.LeakPriority 55
Venta de datos de la red corporativa de la auditora india Joisher & AssociatesA seller in the BreachForums sellers section is offering data allegedly extracted from the corporate network of the Indian audit firm Joisher & Associates. Audit firms hold client financial records, tax filings and internal correspondence, making such data a strong precursor for fraud and business email compromise. The post date is not visible, so freshness should be confirmed before any alerting.LeakPriority 68
Venta de datos de 800.000 pasajeros de Azerbaijan AirlinesA seller on the DarkForums marketplace is advertising roughly 800,000 passenger records allegedly taken from Azerbaijan Airlines (azal.az), including upcoming flight information. If genuine, the dataset exposes names, contact details and travel itineraries of travellers, enabling targeted phishing, fraud and physical-risk profiling. Airline data is also valuable for account-takeover against loyalty and booking systems.LeakPriority 50
Filtración de documento técnico interno de la constelación Starshield de SpaceXA document titled as the Starshield Constellation Technical Baseline and Architecture is being distributed on the BlackBones forum. Starshield is SpaceX's defense-focused satellite line tied to US national security programs, so leaked architecture details could aid adversaries in understanding sensitive capabilities. Even unverified, defense contractors and government space stakeholders should assess exposure.LeakPriority 74
Filtración de base de datos de la Junta de Beneficencia de GuayaquilActor 'Pheisito' published a database belonging to the Junta de Beneficencia de Guayaquil, the public-benefit body that operates major hospitals and social services in Ecuador, in DarkForums' leaks section. The thread looks recent but record count and data fields are hidden behind forum login, so scale is unconfirmed. Exposure of patient, employee or donor records would fuel extortion and targeted phishing against a health-critical institution.