BRIEFLeakhighP60
1TB leak of Russian government ministries offered for sale
Ministerios del Gobierno de Rusia
Detected29 October 2026 · 20:24 UTC
A threat actor on DarkForums is selling a claimed 1TB dataset attributed to Russian government ministries and a Russian IT contractor. If genuine, it could expose internal documents, citizen records and infrastructure details across federal agencies. The scale and government target make it high-value intelligence, though the seller's claims remain unverified.
CategoryLeak
Severityhigh
Priority score60
Detected29 October 2026 · 20:24 UTC
Leak● 45
Presunta filtración de base de datos de empleados de YouTubeA user published a purported YouTube employee database on DarkForums on 29 October 2026, without verified scale or sample data. Employee records can fuel credential-stuffing, phishing and impersonation against staff. The claim is unconfirmed and should be validated before it is treated as a real breach.Leak● 90
Base de datos de la distribuidora eléctrica Edesur (República Dominicana) a la ventaActor K3RN3L_P4N1C posted on DarkForums a 'DOMINICAN REPUBLIC EDESUR DATA' database belonging to the country's main electricity distributor, a critical-infrastructure operator. Although the record count is not shown in the visible snippet, customer, contract and possibly billing/ID data of a national utility is exactly the kind of asset used for fraud and for further intrusion. Any leak of utility subscriber data enables targeted phishing against customers and staff and can expose internal infrastructure details.Leak● 46
Base de datos de aeropuertos iraquíes con 8,6M registros a la ventaA seller on RaidForums is offering 8.6 million records described as MAG airports and Iraqi databases, a rare public sale listing touching aviation infrastructure. Aviation operators and Iraqi government entities should treat it as a possible breach of passenger, staff or contractor data. The post carries no visible date, so freshness and sample validity remain unconfirmed and it ranks below the fresher leaks.Leak● 50
Base de datos de clientes de Porsche con 280.000 registros a la ventaA DarkForums seller using the handle Marx posted a Porsche database of more than 280,000 records on 29 October 2026 in the marketplace section. The record fields are not public, but automotive customer databases typically hold names, addresses, emails and vehicle identification data used for phishing and warranty fraud. Dealers and vehicle owners in the brand's main markets should watch for targeted lures.Leak● 56
Venta de 1,03 millones de archivos de visados indonesiosA BreachForums seller is advertising 1.03 million Indonesian visa client files, about 613 GB parsed, containing passport images, national ID (KTP), family cards, bank details and selfies. This is a complete identity dossier set that enables account takeover, loan fraud and bypass of remote onboarding checks. Indonesian immigration services, banks and KYC-dependent fintechs should assume more than a million applicants are exposed.Leak● 74
Base de datos brasileña de más de 60 millones de registros ofrecida en DarkNetArmyForum user moonsh1ne posted a 'Brazil 60 Million+ Database' thread today in the premium section of DarkNetArmy, advertising a very large Brazilian dataset. The source organization is not named in the visible text, but a corpus of this size for Brazil almost certainly aggregates personal identifiers usable for credential stuffing and fraud. Brazilian banks, telecoms and public services should treat it as a potential exposure of their user base until provenance is established.