BRIEFLeakhighP52
Sale of 49M-record apollo.io contact database
apollo.io
Detected14 September 2026 · 15:12 UTC
A seller is offering a 49 million-record apollo.io B2B contact database dated 2026 on a Russian-language forum. It reportedly contains corporate emails, names, job titles and company details from a widely used sales-intelligence platform. Defenders should anticipate elevated business-email-compromise, credential stuffing and targeted phishing leveraging accurate org-chart data.
CategoryLeak
Severityhigh
Priority score52
Detected14 September 2026 · 15:12 UTC
Leak● 48
Filtración de 1,49M de registros de empresas estatales indiasA dataset with roughly 1.49 million records tied to India's Central Public Sector Enterprises (CPSE) is being circulated on DarkForums. It reportedly includes employee and contact details of state-owned companies. Such government-linked data fuels phishing, impersonation and credential-stuffing campaigns against public-sector and supplier targets.Leak● 46
Filtracion masiva de NBXSoluciones Mexico: 7M usuarios VoIPA database attributed to Mexico's NBXSoluciones VOIP provider, over 7 million user records, has been published. It affects telecom customers with contact and call-related data. Although dated 2025 and therefore not fresh, it remains a large LATAM telecom exposure worth tracking for subscriber and credential risk.Leak● 74
Filtracion de base de pagos de IZIPAY Peru, 3,64M registrosA merchant and payment database tied to Peru's IZIPAY platform, roughly 3.64 million records, is being offered on a darkweb forum. It likely contains customer, card, and transaction data affecting Peruvian merchants and consumers. This is a serious LATAM financial-sector leak that can fuel fraud and phishing campaigns.Leak● 22
Filtración de documentos del banco argelino Crédit Populaire d'AlgérieDocuments attributed to Crédit Populaire d'Algérie, Algeria's state-owned bank, are circulating, with a separate actor claiming the hack. The material is dated June 2025, so it is stale rather than a fresh alert, but leaked banking/customer documents can still fuel fraud and account takeover. Useful mainly as actor and sector background.Leak● 50
Base de datos de 50 millones de ciudadanos indonesios a la ventaAn actor using the handle JakartaGhostDigital is offering a database of roughly 50 million Indonesian records, a large-scale leak with heavy potential for fraud and account takeover. The volume makes it significant even though it is outside Latin America. No clear date is given, so freshness cannot be confirmed.Leak● 55
Filtración de la base de datos de C&A Modas MéxicoA database belonging to Mexican retailer C&A Modas was posted for download on DarkForums, likely containing customer and possibly employee records. The retailer operates widely across Mexico and Latin America, so affected data is regional. Posted in late March 2026, it is not fresh but still fuels credential stuffing and targeted phishing against customers.