BRIEFLeakhighP55
Massive 1.2 billion credential dump (44 GB)
Detected17 September 2026 · 13:12 UTC
A 44 GB dump containing roughly 1.2 billion URL:login:password lines was posted on 15 September 2026. This is a very large stealer-log aggregation, implying massive credential-reuse risk across corporate and consumer accounts. Defenders should enable credential-leak detection and force resets for exposed users.
CategoryLeak
Severityhigh
Priority score55
Detected17 September 2026 · 13:12 UTC
Leak● 45
Base de datos del seguro social chino (474.000 filas) a la ventaA BreachForums seller is offering a 474,000-row database attributed to a Chinese government social security bureau, likely containing citizen identity and social-insurance records. Such data supports identity fraud and large-scale targeting of government beneficiaries, and the sample should be validated before resale spreads it further. Impact for Latin American defenders is limited, so it warrants tracking rather than immediate regional action.Leak● 50
Filtración de datos de Main Line Health con SSN y correos de pacientesA BreachForums thread advertises a database attributed to mainlinehealth.org containing roughly 17,700 rows, including more than 8,000 Social Security numbers and 468 email addresses. If genuine, the SSN concentration points to patient or employee identity data from a US hospital network, enabling identity theft, medical fraud and targeted social engineering. Healthcare defenders should verify the sample and prepare notification and SSN-monitoring steps.Leak● 45
Base de datos de forex de 400.000 registros de Dinamarca y Países Bajos a la ventaA seller is offering a 400,000-record forex database covering Denmark and the Netherlands on BreachForums. The dataset appears to be customer and investor lead data from forex trading platforms, valuable for fraud, phishing and targeted scams. Financial firms and regulators in those markets should treat the records as compromised.Leak● 48
Filtración de 1.400 documentos financieros de Zurich Insurance GroupA BreachForums member posted a leak of more than 1,400 files attributed to Zurich Insurance Group, including financial reports, contracts and internal documents. Although smaller than a full database, contracts and financials can expose business relationships and sensitive commercial data. Insurers and their partners should review whether proprietary documents are circulating.Leak● 52
Base de datos de la mexicana XPeranto con más de 55.000 registros a la ventaUser 'Lvrimer' posted on DarkForums on 1 November 2026 offering a database of more than 55,000 records allegedly extracted from xperanto.com.mx, a Mexican technology/hosting provider. The dataset exposes customer identifiers that can be reused for phishing, credential stuffing and account takeover against Mexican users. It is a fresh, region-specific leak and should be validated and tracked for resale or wider distribution.Leak● 56
Filtración de datos de estudiantes del Ministerio de Educación de MarruecosAn actor using the handle Nyrsafel published what is described as student data belonging to Morocco's Ministry of Education on DarkForums. The dataset involves a government education body and personal data of students and staff, a sensitive category prone to identity fraud and targeted phishing. Government authorities should treat the records as compromised and assess regulatory exposure.