BRIEFLeaklowP38
40 million URL:LOGIN:PASSWORD credential dump
Detected16 September 2026 · 23:12 UTC
A private 40 million line URL:LOGIN:PASSWORD stealer log was published on 16/09/2026, indicating freshly harvested infostealer credentials. It is a generic aggregated dump without a named victim, so its direct relevance to AR-LATAM is limited. It still matters as a source of valid credentials that may enable account takeover if re-used broadly.
CategoryLeak
Severitylow
Priority score38
Detected16 September 2026 · 23:12 UTC
Leak● 50
Base de datos residencial de Canada con 10 millones de registros a la ventaA 10-million-record residential dataset for Canada was posted for sale/leak on DarkForums by user Morvzozar. It reportedly aggregates residential and personal information of Canadian residents. Large address and PII datasets fuel identity fraud, phishing and physical targeting, and merit verification of their source.Leak● 55
Filtracion de 539.737 datos personales de Dukcapil Jakarta Timur (Indonesia)A 539,737-record personal dataset from Dukcapil Jakarta Timur, Indonesia's civil registration directorate for East Jakarta, was posted on DarkForums. It reportedly exposes national identity data of residents. Government civil-registry data is high-value for identity fraud and synthetic identity creation.Leak● 62
Base de datos del FCI Bank filtrada en DarkForumsA database attributed to 'FCI Bank' was posted for leak on DarkForums by user Loxsober. The dump reportedly contains customer records of a banking institution, though the exact entity and country are not confirmed. Bank data is high-value for fraud and account takeover, so affected customers should monitor their accounts.Leak● 66
Base de datos de paytm.com a la venta tras filtracionA database attributed to paytm.com, India's largest payments and fintech platform, was posted for leak on DarkForums by user Tyrlural. It reportedly contains customer account data for a firm serving hundreds of millions of users. Fintech data enables fraud, account takeover and phishing against a critical payments provider.Leak● 68
Filtracion de datos personales del portal justice.fr (Ministerio de Justicia de Francia)A CSV dump of personal data from justice.fr, the French Ministry of Justice portal, was posted on DarkForums by user Nalsaron. It exposes citizen and legal-case personal information from a national government body. Government justice data is high-value for identity fraud and targeted phishing against officials and litigants.Leak● 72
Filtracion de mas de 20 millones de registros internos de UberA dataset of over 20 million records linked to uberhub.uberinternal.com and MDM data was posted on DarkForums. It concerns internal device-management and employee-related data of a global ride-hailing and logistics firm. Exposure of internal identifiers and device records can fuel targeted attacks and social engineering against Uber staff.