BRIEFLeakhighP73
Sale of alleged 750M-record JD.com database
JD.com
Detected6 September 2026 · 10:03 UTC
The listing advertises a 750-million-record database tied to Chinese e-commerce giant JD.com with 2026 data. If real, the scale is exceptional and would enable credential-stuffing, account takeover and large-scale phishing/fraud against users worldwide. It is outside Latin America but still relevant to global enterprise threat intelligence, so the sample and authenticity should be checked immediately.
CategoryLeak
Severityhigh
Priority score73
Detected6 September 2026 · 10:03 UTC
Leak● 33
Filtración de la base de datos de la India RentomojoA post dated 2026-10-19 shares a database reportedly from Rentomojo, an Indian furniture and appliance rental company. Customer PII from such a service can enable fraud and account takeover against subscribers. The scale is unconfirmed and the target is mid-tier, so impact is limited but worth tracking.Leak● 35
Base de datos de la CAF francesa (22,4M) recirculadaA 22.4-million-record dataset attributed to France's CAF family benefits agency is being shared, but it is dated 2025 and appears to be a re-posted older breach. The scale is significant—beneficiary and financial-aid data—yet its age makes it a stale, not a fresh, alert. Useful mainly for cross-referencing reused credentials and past-exposure monitoring.Leak● 42
Filtración de base de datos de MSI (Micro-Star)A post dated 2026-10-19 advertises an 'MSI leaked database,' presumably Micro-Star International. MSI is a major global hardware vendor, so any genuine customer or employee data leak carries supply-chain and fraud risk. Authenticity is unconfirmed and it may be a rehash of the earlier 2023 MSI incident, so treat with caution pending sample verification.Leak● 55
Filtración de datos personales del Congreso de FilipinasA leak of personally identifiable information tied to the Congress of the Philippines was posted on 2026-10-19. Lawmakers' and staff PII can fuel targeted phishing, doxxing and influence operations against a national legislature. Worth flagging for government-sector awareness and IOC tracking.Leak● 68
Filtración de la base de datos nacional de ciudadanía de PakistánA post dated 2026-10-19 offers a download of what is described as Pakistan's national citizenship database, a highly sensitive government dataset. If authentic, exposure of national ID and identity records at country scale is a serious state-level breach enabling mass identity fraud and targeting. High value for monitoring cross-border data reuse and downstream fraud.Leak● 44
Filtración de la base de datos de la tienda g-ladalle.comA DarkForums poster released a downloadable database for g-ladalle.com on 21 Oct 2026, the second French e-commerce leak surfacing in the same batch. Customer emails, addresses and hashed passwords from such shops are routinely reused for phishing, account takeover and card fraud. Confirm the sample's authenticity and scope before assessing exposure.