BRIEFLeakhighP50
Over 1 million US bank logs and PII records offered for sale
Detected15 November 2026 · 11:14 UTC
A BreachForums seller in the Leaks Market advertises over 1 million US bank logs and PII records, including account and personal data. The volume is enough to power account takeover, fraud and targeted phishing against US banking customers. Financial institutions should monitor for exposed credentials and suspicious account activity.
CategoryLeak
Severityhigh
Priority score50
Detected15 November 2026 · 11:14 UTC
LeakPriority 30
Base de datos de tienda de calzado vietnamita drake.vn a la ventaA DarkForums seller is advertising a 130K-record database from drake.vn, a Vietnamese online shoe store. The data likely contains customer contacts and order details usable for phishing and account takeover. Impact is limited to a single regional retailer but still exposes its customers.LeakPriority 55
Presunta filtración de datos de Match.com en 2026A Darkpro forum post advertises a 2026 data breach affecting Match.com, the large dating platform. If genuine, user profiles, emails and personal data from a global dating service would be exposed, fueling phishing and extortion. The claim should be validated and the scale confirmed before wider notification.LeakPriority 55
Base de datos de la empresa española disok.com a la ventaA seller on DarkForums (Place Leaks Market, user SebastianDar) is offering an 80K-record database belonging to disok.com, a Spanish company. Customer contact and account data at this scale enables targeted phishing and account takeover. Spanish organizations in the same sector should verify exposure and warn potentially affected users.LeakPriority 50
Datos de empleados de Harkins Builders con SSN a la ventaA BreachForums seller is offering fresh employee data from Harkins Builders, including Social Security numbers and routing numbers. This combination enables identity theft and tax or payroll fraud against the company's staff. The firm and its HR/payroll providers should confirm exposure and support affected employees.LeakPriority 50
Venta de datos de la plataforma de pagos Octopus de Hong KongOn 14 November 2026 the DarkForums user 'tet' posted a sale thread for Octopus Hong Kong, the operator of the territory's ubiquitous contactless stored-value payment card. The listing visible so far gives no volume, sample or data type, so it may be a customer database, transaction data or merely corporate files. Payment and financial defenders in Hong Kong should verify the claim and prepare for cardholder fraud if it proves genuine.LeakPriority 56
Venta de datos de la ferroviaria japonesa JR EastOn 14 November 2026 the DarkForums seller 'wulen' posted an offer of data belonging to JR East, Japan's largest passenger railway operator and a piece of national transport infrastructure. The scope and data type are not described in the visible listing, but even partial corporate or customer data from a rail operator supports fraud and future intrusion. Japanese transport and critical-infrastructure teams should assess exposure and monitor for follow-on activity.