BRIEFLeakhighP55
Global Telegram user data offered for sale
Telegram (global user base)
Detected27 September 2026 · 13:48 UTC
A marketplace listing posted today advertises 'Global Telegram user data', likely a large corpus of phone numbers and account identifiers scraped or breached from Telegram. Such data drives smishing, account takeover and SIM-swap attacks against a huge user base. The fresh listing warrants monitoring for scale and provenance.
CategoryLeak
Severityhigh
Priority score55
Detected27 September 2026 · 13:48 UTC
Leak● 50
Base de 892 millones de registros atribuida a morganstanley.com a la ventaA seller claims to be offering a database tied to morganstanley.com with 892 million records, posted in August 2026. The record count is implausible for the firm and typical of repackaged combolists, so it should be treated as a likely recycled/exaggerated leak rather than a fresh breach. It still warrants monitoring for credential-stuffing against financial-sector accounts.Leak● 62
Filtración de 5 GB con licencias, pasaportes y SSN de EE. UU.A ~5 GB dataset of US driver's licenses, passport images and Social Security Numbers was posted free for download on DarkForums minutes ago. This is full identity-kit material that enables synthetic-identity fraud, loan/credit account takeover and KYC bypass. Defenders should monitor for reuse against banks and government identity services and treat exposed individuals as high risk.Leak● 45
Filtración de 37.000 identificaciones nacionales de IsraelA fresh post leaks over 37,000 Israeli national IDs together with full names, described as new data. National-ID PII enables identity theft, SIM-swap and credit fraud, and targeted doxing of citizens. It is small in scale but sensitive, and part of a series of Israeli data drops worth monitoring.Leak● 52
Filtración de 102.000 estudiantes del campus.gov.il israelíA dataset of over 102,000 Israeli student records (student_id, name, email, username, year) is being leaked from a government education domain, campus.gov.il. It is a state-domain leak that enables phishing and identity abuse against students and staff. Relevant for defenders tracking government/education sector breaches.Leak● 72
Filtración de base de datos de Adobe con 13 millones de registrosAn actor posted a claimed 832 GB database of 13 million records tied to business.adobe.com on a dark-web forum, offered for download. If genuine, it exposes corporate account and credential data at very large scale and can fuel credential-stuffing against Adobe-linked enterprise accounts. Defenders should track reuse of affected IDs and force resets where relevant.Leak● 47
Publican 1 millón de logs de stealer (URL:LOG:PASS)A private dump of roughly 1 million stealer logs (URL:login:password) was posted across multiple forums, including this one today. Such logs fuel credential stuffing and account-takeover campaigns against many services. Its freshness makes it worth ingesting for credential monitoring and forced session revocation.