Blog

A leaksear.ch index covers nearly 5 million AT&T 2023 records tied to a third-party marketing vendor incident that AT&T said affected about 9 million wireless accounts. The exposed data includes emails, names, phone numbers, billing account numbers, device details, ZIP codes, and upgrade-eligibility data, but not SSNs, payment cards, or passwords.

A Facebook-targeted credential-stuffing combo list contains 1.3 million email, username, and plaintext password pairs. The dataset is described as aggregated from prior public breaches and infostealer logs, not a new breach of Facebook itself.

A Ticketmaster leak indexed by leaksear.ch contains 167,500 Taylor Swift Eras Tour ticket barcode records tied to Miami, New Orleans, and Indianapolis shows. The indexed sample includes ticket and venue metadata but is described as containing no customer PII.

Leaksear.ch has indexed 1,326 records from an alleged The Crypto Merchant database leak, including customer contact, shipping, account, and order data. The exposure matters because hardware-wallet buyer data can fuel targeted phishing, account attacks, and physical-address risk.

A Salesforce CRM dataset tied to Albertsons Companies and indexed by leaksear.ch contains 252,147 records with names, emails, phone numbers, addresses and related profile fields. Public reporting links the release to Scattered LAPSUS$ Hunters' October 2025 extortion campaign against Salesforce customers.

Engie Resources appears in a 2025 Salesforce extortion wave tied to Scattered LAPSUS$ Hunters / ShinyHunters. leaksear.ch indexed 261,531 records with names, addresses, phone numbers, emails and Salesforce account metadata.

leaksear.ch has indexed a Gap Inc. Salesforce customer dataset containing 223,110 records. Exposed data includes names, emails, phones, addresses, dates of birth, loyalty fields, and internal Salesforce identifiers.