BRIEFLeaklowP40
Sale of the MOAB (Mother of All Breaches) dataset
Detected18 September 2026 · 15:12 UTC
A seller is offering the 'Mother of All Breaches' (MOAB), a huge aggregated dataset of billions of leaked credentials. The listing is recent but the underlying data is a known 2024 compilation, so it is stale intel rather than a new breach. Still useful for credential-stuffing exposure checks.
CategoryLeak
Severitylow
Priority score40
Detected18 September 2026 · 15:12 UTC
Leak● 42
Base de datos del registro civil Dukcapil Madiun (Indonesia) publicadaA RaidForums thread publishes a download of the Dukcapil civil-registry database for Madiun regency, Indonesia, which normally holds national ID numbers, family records and addresses. Government identity registries are the highest-value source for synthetic identity fraud and KYC bypass, but the thread appears to be an older repost rather than a new breach. It is worth cataloguing for regional identity-fraud trends rather than alerting as a fresh incident.Leak● 50
Presunta filtración de 11 millones de registros de la francesa ChronopostA DarkForums post advertises an 11-million-record dataset attributed to Chronopost, the French parcel arm of La Poste; the body is login-walled so only the headline claim is visible. Shipping data of that size typically includes names, addresses, phone numbers and tracking numbers, the exact raw material for parcel-phishing campaigns. French logistics and e-commerce customers could see convincing fake delivery notices within days if the data is real.Leak● 55
Afirman filtración de base de datos de Bank of AmericaA DarkForums thread advertises a leaked Bank of America database, though the body is behind a login wall and only the title is visible, so the volume and authenticity are unconfirmed. Claims against a top-tier bank are often recycled or fabricated, but if real they would enable large-scale phishing and account-takeover attempts against customers. Monitoring for re-posted samples and credential reuse is warranted until the claim is disproven.Leak● 30
Base de datos del registro civil Dukcapil de Indonesia publicadaUser Jax7 posted a database attributed to Indonesia's Dukcapil civil registry, which holds national identity numbers, addresses and family records. The thread dates from 9 February 2026, so it is months old and likely already circulated; it remains relevant for identity-fraud and KYC-bypass abuse but is not a fresh alert.Leak● 88
Filtración de la base de datos del Proyecto Chavimochic (gob.pe)User OscarElMasCapito published on BreachForums a database belonging to Proyecto Chavimochic, Peru's flagship irrigation and water-infrastructure programme under the gob.pe domain. Posted today (2 Nov 2026), the dump exposes government project data such as staff, supplier or citizen records that can fuel phishing, invoice fraud and follow-on intrusion into public-works systems.Leak● 50
Filtración de la base de datos de WorkL.comA BreachForums thread claims a database leak from WorkL.com, a digital workplace intelligence platform used by enterprises for employee surveys and analytics. Such dumps usually carry corporate emails, names, roles and survey responses that feed spear-phishing and business email compromise. Client companies should treat their employee addresses as exposed.