BRIEFLeakhighP68
Pubali Bank Securities data up for sale in Bangladesh
Pubali Bank Securities
Detected26 October 2026 · 14:29 UTC
Seller 'bytetobreach' posted on Spear's marketplace a PGP-signed offer titled 'Bengali Carnage' advertising data from Pubali Bank Securities, a Bangladeshi brokerage. The listing is roughly one hour old, suggesting a fresh or recently obtained dataset tied to a regulated financial entity. Bank/brokerage customer and trading data is high-value for fraud and identity theft, so regional financial-sector defenders should treat it as a live exposure.
CategoryLeak
Severityhigh
Priority score68
Detected26 October 2026 · 14:29 UTC
Leak● 20
Base de datos de la Fundación Neijing (Colombia) a la ventaA forum user (Xvst) is offering a database from fundacionneijing.org on PwsForums, posted recently. The affected entity is a small Spanish-language foundation, so the volume and sensitivity of records are unlikely to be large. It is a named-organization leak but of limited strategic value for regional defenders.Leak● 30
Directorio de empleados de MetLife (585.130 registros) filtradoA 585,130-line MetLife employee directory dated 2023-05 is circulating on PwsForums, exposing corporate names, roles and likely work contact data. Although the dataset is stale, it remains useful for phishing, org-chart mapping and BEC targeting against a major global insurer. It is a real organization leak rather than a combolist, but its age limits immediate impact.Leak● 32
Filtración de base de datos de la plataforma YouNowA moderator on Spear's leak forum posted a database belonging to YouNow, a US-based live-streaming and social platform with reported multi-million-dollar revenue and a large user base. The thread dates to late July 2026, so it is roughly three months old and not a fresh alert, though the dataset may still be circulating. User account and personal data of a consumer platform is relevant for credential-reuse and phishing risk to its user base.Leak● 72
Base de datos del Gobierno de Zambia, 34,1 millones de registrosBreachForums user Mr_Raccoon is advertising a 34.1 million-record database attributed to the Government of Zambia, tagged 2026 and posted in October, which points to a national-scale dump of citizen or civil-servant data. Leaks of this size enable mass identity fraud, credential reuse against state portals and targeted phishing of public employees. Although outside Latin America, it is a confirmed government leak worth tracking for regional impersonation and cross-border fraud patterns.Leak● 65
Venta de datos del bróker Pubali Bank Securities de BangladésThe actor bytetobreach is selling 'Bengali Carnage', a dataset attributed to Bangladeshi brokerage Pubali Bank Securities, on the Spear.cx marketplace. Leaked brokerage/client records enable account takeover, targeted phishing and investment fraud. Financial defenders should treat it as probable exposure and watch for KYC or login data circulating.Leak● 43
Filtración gratuita de base de datos de salud de EE. UU. con 27.000 registrosA user (Vyntra) on BreachForums is freely distributing a US healthcare database containing more than 27,000 records. Even at modest scale, healthcare data carries high sensitivity (patient identifiers, potentially clinical or billing details) and free release accelerates abuse. Organizations in the US health sector should assess whether their data is present and prepare for identity-fraud and phishing fallout.