BRIEFLeaklowP40
740 GB stealer log and ULP dump published
Detected18 September 2026 · 05:12 UTC
A 740 GB archive of stealer logs and URL:login:password (ULP) data has been posted on RaidForums. Though published in January 2026, the sheer volume makes it a long-lived credential source for account takeover. Defenders should assume broad credential exposure and enforce resets and MFA.
CategoryLeak
Severitylow
Priority score40
Detected18 September 2026 · 05:12 UTC
Leak● 40
Reposteo de la base de datos de la Universidad de Harvard (ShinyHunters)A moderator on the Spear Leaks forum is reposting the well-known Harvard University database attributed to ShinyHunters. Because it is explicitly a repost of an older, already-circulated leak, it is not a fresh incident but a redistribution that raises renewed attention. It is a large institutional dataset with limited immediate defender value outside confirming prior exposure.Leak● 56
Venta de base de datos del Fred Hutch Cancer Center (EE. UU.)A seller on DarkForums is advertising a database belonging to the Fred Hutch Cancer Center (fredhutch.org), a major US cancer research and treatment institution. Healthcare data carries elevated sensitivity, including patient and research information that can fuel fraud and extortion. Although outside the LATAM region, it is a named high-value organization in the health sector.Leak● 72
Base de datos de Brasil con 780.000 registros a la ventaA thread on DarkForums offers a Brazil dataset of roughly 780,000 records labelled as 'part 1 of Latin America', suggesting a larger multi-country regional leak still being released. Content sits behind a login wall, but the volume and framing point to a substantial Brazilian PII database. If confirmed, it exposes hundreds of thousands of individuals to credential and identity abuse.Leak● 93
Base de datos del Registro Civil de Mendoza a la ventaThe actor 'cutzinger' is advertising on DarkForums a database from the Mendoza Civil Registry covering 2024, 2025 and 2026, exposing personal identity data of Argentine citizens. Because this is a government body that manages identity and official documentation, the leak enables identity fraud and impersonation at scale. It is a high-impact government data breach affecting an Argentine provincial registry.Leak● 22
Reposteo de la antigua filtración de DC Health LinkA thread titled 'DC Health Link, Leaked, Download!' sharing the dataset of the US Capitol-region health insurance marketplace was posted on DarkForums in July 2023, making this a stale repost rather than a new incident. The original breach exposed subscriber personal and health coverage data tied to a government-affiliated exchange. Because it is years old and already public, it carries limited value for fresh alerting but confirms continued circulation of the data.Leak● 72
Base de datos de clientes de La Poste Mobile publicada en DarkForumsA database belonging to French telecom operator La Poste Mobile (lapostemobile.fr) was posted on DarkForums by user Pyxlezon on 1 November 2026. As an MVNO of La Poste, the exposure of subscriber data raises concerns over SIM-swap, phishing and account takeover of telecom customers. Telecom subscriber data is high-value for fraud and downstream access, so the leak warrants monitoring and customer notification.