BRIEFLeakhighP56
Data of Japanese rail operator JR East offered for sale
JR East (Japan Railways)
Detected15 November 2026 · 09:14 UTC
On 14 November 2026 the DarkForums seller 'wulen' posted an offer of data belonging to JR East, Japan's largest passenger railway operator and a piece of national transport infrastructure. The scope and data type are not described in the visible listing, but even partial corporate or customer data from a rail operator supports fraud and future intrusion. Japanese transport and critical-infrastructure teams should assess exposure and monitor for follow-on activity.
CategoryLeak
Severityhigh
Priority score56
Detected15 November 2026 · 09:14 UTC
LeakPriority 50
Venta de datos de la plataforma de pagos Octopus de Hong KongOn 14 November 2026 the DarkForums user 'tet' posted a sale thread for Octopus Hong Kong, the operator of the territory's ubiquitous contactless stored-value payment card. The listing visible so far gives no volume, sample or data type, so it may be a customer database, transaction data or merely corporate files. Payment and financial defenders in Hong Kong should verify the claim and prepare for cardholder fraud if it proves genuine.LeakPriority 60
Base de datos de la Autoridad de Transporte de Dubái (RTA) a la ventaA BreachForums seller is offering a 50 GB database allegedly extracted from Dubai's Roads and Transport Authority (rta.ae), the government body responsible for roads, licensing and public transport. If genuine, the dump would expose citizen and vehicle-related records handled by a national service provider. Government and transport defenders in the Gulf should validate exposure and watch for downstream identity fraud; no publication date is visible.LeakPriority 63
Base de datos de 1.700 millones de registros de una telco india a la ventaA BreachForums user posted on 15 November 2026 an offer for an Indian telecom database said to contain 1.7 billion records. If authentic, it would be one of the largest subscriber-data leaks to date, enabling SIM-swap, account takeover and large-scale fraud. The figure closely matches recycled Indian telecom and identity data that has circulated for years, so authenticity must be verified before treating it as new.LeakPriority 82
Filtración de la base de datos de la Municipalidad de San Justo (Córdoba)A BreachForums thread advertises the database of the Municipality of San Justo (Francisco), in Córdoba, Argentina, presented as a full extraction of the local government's records. The volume and date are not shown, but municipal data sets typically include taxpayer, employee and benefit-recipient records useful for targeted phishing and fraud. Argentine municipal defenders should confirm the scope, rotate credentials and monitor for publication of the data.LeakPriority 40
Presunta brecha de datos personales en la ticketera griega KEF / CC TicketingA DarkForums user (Noiem) published a thread claiming a personal data breach affecting Greece's KEF / CC Ticketing, a ticketing operator, in the forum's Databases section. Records of this kind typically hold names, contact details and purchase history of event customers, which support phishing and account takeover. Scale and authenticity are unverified in the visible portion of the post.LeakPriority 74
Presunta filtración de base de datos de TSMC publicada en DarkForumsA DarkForums user (SmithBrianI) opened a thread titled 'TSMC LEA' in the Databases section on 15 November 2026, claiming a dataset allegedly obtained from the Taiwanese semiconductor giant. TSMC sits at the centre of global chip supply chains, so even an unverified claim warrants checks against supplier and partner data. The visible post shows no sample, record count or proof of compromise.