BRIEFLeaklowP40
Employee data of US builder Harkins Builders offered for sale
Harkins Builders (harkinsbuilders.com)
Detected15 November 2026 · 10:14 UTC
A BreachForums seller is advertising fresh employee records from Harkins Builders, a US construction firm, including Social Security numbers and bank routing numbers. This combination supports direct payroll diversion, tax fraud and loan application fraud against staff. Although the company is mid-sized and outside the region, the data type is high impact for the individuals affected.
CategoryLeak
Severitylow
Priority score40
Detected15 November 2026 · 10:14 UTC
LeakPriority 50
Venta de datos de la plataforma de pagos Octopus de Hong KongOn 14 November 2026 the DarkForums user 'tet' posted a sale thread for Octopus Hong Kong, the operator of the territory's ubiquitous contactless stored-value payment card. The listing visible so far gives no volume, sample or data type, so it may be a customer database, transaction data or merely corporate files. Payment and financial defenders in Hong Kong should verify the claim and prepare for cardholder fraud if it proves genuine.LeakPriority 56
Venta de datos de la ferroviaria japonesa JR EastOn 14 November 2026 the DarkForums seller 'wulen' posted an offer of data belonging to JR East, Japan's largest passenger railway operator and a piece of national transport infrastructure. The scope and data type are not described in the visible listing, but even partial corporate or customer data from a rail operator supports fraud and future intrusion. Japanese transport and critical-infrastructure teams should assess exposure and monitor for follow-on activity.LeakPriority 62
Venta de base de datos de 50 GB de la Autoridad de Carreteras y Transporte de DubáiA seller on BreachForums claims to hold a 50 GB database belonging to Dubai's Roads and Transport Authority, the government body managing roads, licensing and public transport. Such a dump typically contains citizen, vehicle and licensing records that enable identity fraud and targeted phishing. Exposure of a transport authority also raises questions about access to internal operational systems.LeakPriority 63
Base de datos de 1.700 millones de registros de una telco india a la ventaA BreachForums user posted on 15 November 2026 an offer for an Indian telecom database said to contain 1.7 billion records. If authentic, it would be one of the largest subscriber-data leaks to date, enabling SIM-swap, account takeover and large-scale fraud. The figure closely matches recycled Indian telecom and identity data that has circulated for years, so authenticity must be verified before treating it as new.LeakPriority 82
Filtración de la base de datos de la Municipalidad de San Justo (Córdoba)A BreachForums thread advertises the database of the Municipality of San Justo (Francisco), in Córdoba, Argentina, presented as a full extraction of the local government's records. The volume and date are not shown, but municipal data sets typically include taxpayer, employee and benefit-recipient records useful for targeted phishing and fraud. Argentine municipal defenders should confirm the scope, rotate credentials and monitor for publication of the data.LeakPriority 40
Presunta brecha de datos personales en la ticketera griega KEF / CC TicketingA DarkForums user (Noiem) published a thread claiming a personal data breach affecting Greece's KEF / CC Ticketing, a ticketing operator, in the forum's Databases section. Records of this kind typically hold names, contact details and purchase history of event customers, which support phishing and account takeover. Scale and authenticity are unverified in the visible portion of the post.