BRIEFLeakhighP58
Spanish .es domain databases offered for sale
Detected31 October 2026 · 17:24 UTC
DarkForums user Finqadar posted on 31 October 2026 a sales thread for 'Spain .es databases', offering one or more datasets tied to Spanish domains. If the content is genuine it would affect Spanish organisations and their customers, with credentials and personal data usable for fraud. Detail is limited, so scope and authenticity must be verified before escalation.
CategoryLeak
Severityhigh
Priority score58
Detected31 October 2026 · 17:24 UTC
Leak● 22
Venta de base de datos del hosting israelí Aurion-HostingA DarkForums seller (chuu) listed the database of Israeli hosting provider aurion-hosting.co.il for sale, with the post dated June 13, 2025. The data is now well over a year old and the target is a small regional host outside the AR/LATAM focus, so it is stale rather than a fresh alert. It could still contain customer PII and account credentials useful for downstream attacks.Leak● 44
Base de datos de 1 millón de cuentas de Instagram de EE.UU. a la ventaA DarkForums user (Darhokin) posted on October 31, 2026 a claimed database of roughly one million US Instagram accounts. If authentic it exposes consumer credentials and profile data for US-based users rather than any government or critical-infrastructure entity. Defenders should treat it as a credential-stuffing and account-takeover risk, especially where passwords are reused.Leak● 42
Muestra de datos filtrados de AT&T publicada en DarkForumsDarkForums user Yiryupik posted an 'AT&T Leaked Sample' on 31 October 2026, offering only a fragment of records rather than a full dataset. Such samples are often recycled from previously reported telecom breaches, so novelty is uncertain. It still warrants checking whether the records are new, as telecom data feeds SIM-swap and account-takeover fraud.Leak● 50
Archivo de filtraciones 2026 de ShinyHunters ofrecido en foro onionAn onion forum thread (login-walled, content unreadable) advertises a 'Database 2026 Leaks Archive of ShinyHunters'. If genuine, it aggregates multiple 2026 breach datasets attributed to a prolific group, which is valuable for mapping exposure across victims. The post could not be verified and no date or victim list is visible, so treat it as an indicator rather than a confirmed leak.Leak● 64
Filtración de 10 GB de datos internos de NestléDarkForums user Qeltoxer posted on 31 October 2026 a thread advertising 10 GB of Nestlé data. Ten gigabytes is enough to include internal documents, supplier records or employee information rather than a trivial sample. Multinational food-supply data is also relevant to supply-chain and business-partner defenders in the region.Leak● 72
Filtración de documentos y datos de usuarios de Binance 2026DarkForums user Rozyukor posted on 31 October 2026 a thread titled 'Binance leak 2026 docs and user data', claiming internal documents plus customer data. Exchange leaks are high-value because they feed SIM-swap, phishing and account-takeover campaigns against crypto holders. Defenders should treat any Binance-linked credentials or KYC data as potentially compromised.