BRIEFLeaklowP50
Sale of 3.6 million URL:LOG:PASS credential list
Detected30 August 2026 · 11:15 UTC
This thread offers a private list of 3.6 million URL:LOG:PASS credentials, likely harvested from infostealer malware. The scale is significant and could enable credential stuffing against a wide range of online services, including corporate portals and VPNs. The lack of a clear post date makes it difficult to confirm freshness, but the volume alone justifies monitoring.
CategoryLeak
Severitylow
Priority score50
Detected30 August 2026 · 11:15 UTC
Leak● 38
Filtración de 105K registros de Inter Mutuelles Habitat (Francia)A 105K-record database from French social-housing provider Inter Mutuelles Habitat (ima.eu) has surfaced, exposing tenant and beneficiary personal data. Housing records reveal vulnerable populations and are usable for phishing and fraud. Modest scale and already a few months old, so it is a secondary item.Leak● 50
Filtración de datos de 176K agentes gubernamentales en E-campus (Francia)A 176K-record database of French government agents linked to the E-campus Intérieur platform is being leaked. Government-employee PII, including professional details, is high value for spear-phishing and impersonation against public administration. Even outside LATAM, it demonstrates a government-targeting pattern worth tracking.Leak● 52
Bases de datos de seguros de salud de Taiwán y Corea a la ventaA seller advertises fresh healthcare-insurance databases from Taiwan and South Korea, a sector with strict privacy sensitivity. Leaked insurance data fuels medical identity fraud and targeted extortion of policyholders. Worth tracking for the sector and for cross-border fraud exposure.Leak● 68
Base de datos de fortalezas.org de Brasil (742K contactos) a la ventaA seller is offering a 742K-record database from Brazil's fortalezas.org containing personal contacts and professional profiles. The scale and personal-data content make it valuable for phishing, identity fraud and targeting Brazilian individuals and organizations. LATAM defenders should watch for credential-stuffing and impersonation abuse.Leak● 60
Volcado de base de datos de 655GB de radiax.com a la ventaA 655GB database attributed to radiax.com was posted fresh on a hacking forum, signalling a major exfiltration of the site's data. The sheer volume implies a large-scale breach likely affecting many user records or backend/operational data. Defenders should verify exposure and monitor for downstream credential abuse against the victim and its supply chain.Leak● 42
Filtración de la base de datos de Remote3.coA second-version dump of the Remote3.co crypto jobs platform has been published for free download on a leak forum, exposing registered accounts and associated user data. The crypto focus makes these credentials valuable for account takeover and follow-on fraud. Defenders should check for corporate emails in the dump and force password resets.