BRIEFLeakhighP60
5.56M URL:LOG:PASS credential dump offered on DAXUS.PRO
DAXUS.PRO
Detected30 September 2026 · 04:18 UTC
A dump of roughly 5.56 million URL:LOG:PASS stealer records is being advertised on the DAXUS.PRO marketplace. The volume and log format mean many corporate web logins, session cookies and internal portals are likely included. Any organization with exposed web authentication should treat this as an active credential leak and force resets where relevant.
CategoryLeak
Severityhigh
Priority score60
Detected30 September 2026 · 04:18 UTC
LeakPriority 56
Filtración de 4,5 GB de datos internos de BP BioenergyA DarkForums user (Hannibal_Lecter) posted in early November 2026 an alleged hack and dump of roughly 4.5 GB of extracted data from BP Bioenergy. The target fits the energy/bioenergy sector, which has operational and third-party exposure. Volume and sector make it worth validating for internal documents, credentials and supply-chain details.LeakPriority 62
Filtración de información del rectorado del ITLA, República DominicanaA DarkForums thread advertises a database described as information from the rector's office of ITLA, a Dominican Republic public technology institute. The exposure centers on institutional/administrative data of a government-backed education entity. Such leaks aid phishing of staff and students and reveal internal structure of a public institution.LeakPriority 72
Filtración de la base de datos de la fintech hondureña TodoPagoA DarkForums user (hassen) posted a database belonging to todopago.hn, a Honduran online payments platform, on 14 November 2026. The .hn domain ties the victim to Honduras and to the local financial/payments sector, which handles transaction and customer KYC data. A leak of a payment provider is high impact for fraud, account takeover and downstream merchant exposure.LeakPriority 38
Base de datos de 31 GB del sitio de apuestas Cenabet filtradaA 31 GB database reportedly belonging to the Cenabet online betting brand was shared in a hacking forum's fresh-leaks section. The volume suggests a large customer and account dataset, though the leak dates to June 2026 and is not freshly published. It is relevant for credential and PII exposure tied to gambling accounts.LeakPriority 45
Base de datos de la española OVP Software filtrada en DarkForumsA database belonging to the Spanish software vendor ovpsoftware.es was posted in the DarkForums leak section by user V0idix. The thread dates to July 2026 and the record count is not disclosed, so exposure should be assessed. Spanish-speaking organizations and customers of OVP Software should monitor for leaked data.LeakPriority 50
Filtración de datos de empleados de Amerijet International AirlinesAn employee directory dump from Amerijet International Airlines, apparently extracted from Azure, was posted on multiple leak forums including PwsForums and RaidForums. It contains 3,400+ records with names, corporate emails, job titles and phone numbers. The directory data enables targeted phishing and business email compromise against a US cargo airline.