BRIEFLeakhighP71
Stolen NSW Health data offered for sale (Australia)
NSW Health
Detected3 November 2026 · 15:24 UTC
The seller 'bytetobreach' on the Spear forum is advertising what appears to be stolen data tied to NSW Health, an Australian state health authority. Patient and operational health data is highly sensitive and its sale exposes individuals and the organization to fraud and reputational harm. A named critical-infrastructure health body makes this a priority item to track.
CategoryLeak
Severityhigh
Priority score71
Detected3 November 2026 · 15:24 UTC
Leak● 64
Venta de datos de salud de NSW Health (Australia)A seller on the Spear forum is offering data belonging to NSW Health, Australia's largest public health system, in a thread posted about an hour ago. Public health records carry sensitive clinical and identity data affecting millions of patients. Though outside Latin America, the government-sector victim and freshness warrant monitoring for downstream credential abuse.Leak● 72
Venta de datos biométricos y fotos de figuras públicas colombianasA DarkForums seller is advertising biometric data and photographs of Colombian artists, influencers, singers and even presidents. Biometric material cannot be reset and is highly attractive for identity fraud, impersonation and targeted extortion against high-profile figures. The exact date is unconfirmed, but the political exposure makes it a priority lead for Colombian authorities.Leak● 76
ShinyHunters publica 3,3 TB de datos de DexComShinyHunters posted a 3.3 TB dataset attributed to DexCom, a major US continuous glucose monitoring manufacturer, on PwsForums, with thread activity within the last hour. The volume points to large-scale corporate and possibly patient-related records. Healthcare device makers are high-value targets, and exposure of clinical or customer data carries regulatory and patient-safety implications.Leak● 82
Base de datos de ciudadanos ecuatorianos a la venta en DarkForumsA seller using the handle FURTADO posted on DarkForums on 3 November 2026 offering a database of Ecuadorian citizens. If genuine, it exposes national identity data that enables identity theft, credential abuse and targeted fraud against residents. Defenders in Ecuador's public and financial sectors should verify exposure and warn affected citizens.Leak● 41
Base de datos CRM del concesionario francés Distinxion a la ventaA seller advertises a French dataset described as 518K CRM contacts, 291K emails and 410K phones (57 MB) attributed to the Distinxion used-car network. The volume is consistent with a full customer-relationship export rather than a scraped list, though the thread is login-walled and undated. Exposed CRM data of a dealership group supports vehicle-financing fraud, insurance impersonation and convincing phishing of buyers.Leak● 44
Base de datos de la empresa colombiana El Zarzal a la ventaA seller on an onion forum lists a database belonging to the Colombian site elzarzal.com, indicating a breach dump is being traded. The thread is login-walled so record counts and data fields are not visible, and no date is given. Even a small Latin American commercial database is useful for localised fraud and phishing against Colombian customers and staff.