BRIEFLeakhighP70
800,000 Azerbaijan Airlines (azal.az) passengers' data for sale
Azerbaijan Airlines (AZAL)
Detected14 November 2026 · 07:13 UTC
An actor is selling roughly 800,000 passenger records belonging to Azerbaijan Airlines (azal.az), including upcoming flight information, on the BreachForums marketplace. Combining PII with future travel schedules raises risks of targeted fraud, scams and physical-security concerns for travelers. The scale and airline-specific data make this a notable commercial data sale.
CategoryLeak
Severityhigh
Priority score70
Detected14 November 2026 · 07:13 UTC
LeakPriority 48
Base de datos de la financiera Kreditplus filtrada para descargaA RaidForums thread offers a downloadable dump attributed to Kreditplus, an Indonesian consumer-finance lender operating in the regulated lending sector. If genuine, it would expose borrower identities and contact data that fuel phishing and identity theft against customers. The company should confirm scope, check regulator obligations and warn affected borrowers.LeakPriority 70
Base de datos de CarMax filtrada y publicada en un foroA downloadable dump advertised as the CarMax database was posted on RaidForums by user 'Wadjet', targeting one of the largest used-car retailers in the United States. If authentic, it would expose customer names, contact details and account information useful for phishing and account takeover. Defenders should validate the sample, monitor for credential re-use and prepare customer notifications.LeakPriority 66
Filtración de documento interno de SpaceX sobre la constelación StarshieldAn internal SpaceX document describing the technical baseline and architecture of the Starshield defense satellite constellation was offered on the BlackBones forum. Starshield supports US government and military communications, so leakage of architecture details could help adversaries target or interfere with these systems. Defense and satellite-sector teams should assess the document's authenticity and sensitivity.LeakPriority 58
Filtración de 4,5 GB de datos de BP BioenergyA threat actor using the handle Hannibal_Lecter published a 4.5 GB data extract allegedly stolen from BP Bioenergy on DarkForums in November 2026. The volume suggests corporate files such as contracts, internal communications or operational data from the bioenergy sector. If legitimate, it exposes sensitive business and partner information, so the company and its suppliers should verify the exposure.LeakPriority 62
Filtración de información del rectorado del ITLA, República DominicanaA DarkForums thread advertises a database described as information from the rector's office of ITLA, a Dominican Republic public technology institute. The exposure centers on institutional/administrative data of a government-backed education entity. Such leaks aid phishing of staff and students and reveal internal structure of a public institution.LeakPriority 72
Filtración de la base de datos de la fintech hondureña TodoPagoA DarkForums user (hassen) posted a database belonging to todopago.hn, a Honduran online payments platform, on 14 November 2026. The .hn domain ties the victim to Honduras and to the local financial/payments sector, which handles transaction and customer KYC data. A leak of a payment provider is high impact for fraud, account takeover and downstream merchant exposure.