BRIEFLeaklowP50
Sale of 4TB database with identity documents and selfies
Detected27 August 2026 · 09:15 UTC
The ad offers a 4TB database of identity documents including selfies, passports, and driver's licenses. This massive scale could enable large-scale identity fraud and KYC bypass. Defenders should check if their customers' PII appears in such datasets, though the unknown origin and date reduce immediate actionability.
CategoryLeak
Severitylow
Priority score50
Detected27 August 2026 · 09:15 UTC
Leak● 26
Filtración de datos de la minorista francesa La Redoute (~100K)A database reportedly holding around 100,000 records of French fashion retailer La Redoute was shared on a leak forum, exposing customer names, emails and likely addresses. Leaked retail data of this size feeds phishing, account takeover and card-not-present fraud. It is off-region and dated May 2026, so it is background context rather than a fresh alert.Leak● 30
Filtración de la base de datos de la tienda francesa WOOPIT.FR (256K)A 256,000-record database of French e-commerce site woopit.fr was posted on a leak forum, exposing customer order and contact data. It matters because such records enable credential stuffing, phishing and fraud against the victims. However it is dated June 2026 and outside Latin America, so it is informational rather than an urgent alert.Leak● 50
Base de datos de qudify.co (2 millones) a la ventaA 2-million-record database attributed to qudify.co is being offered by a bulk database reseller. Details on the organization and data fields are scant, so impact is uncertain, but the size is consistent with a substantial customer or account dump. Worth a low-priority verification pass rather than a hard alert.Leak● 54
Base de datos de Astroyogi (2,9 millones) a la ventaA seller lists a 2.9-million-record database from the Indian astrology platform Astroyogi. The likely contents are user emails, phone numbers and profile data, usable for spam and credential attacks. It is a mid-size consumer leak with limited strategic impact but worth tracking for affected-user alerting.Leak● 66
Base de datos de Hey Dude India (15 millones) a la ventaA 15-million-record dataset attributed to the footwear brand Hey Dude's Indian storefront is being sold online. The volume suggests a large trove of customer PII and possibly e-commerce account credentials, useful for credential-stuffing and phishing. Defenders monitoring the brand or its parent group should verify and pivot on affected email domains.Leak● 68
Base de datos de Tamimi Markets (6 millones) a la ventaA seller is advertising a 6-million-record database tied to the Saudi supermarket chain Tamimi Markets, posted on 13 October 2026. If genuine, it would expose customer identities and retail/loyalty data across a major Gulf retailer, fueling fraud and targeted phishing. Retail breaches of this scale also raise supply-chain and payment-fraud concerns.