JANUARY 2026 featured a wave of disclosures spanning consumer platforms, enterprise identity workflows and the cybercrime ecosystem, with BreachForums, SoundCloud and Trust Wallet among the prominent cases. BreachForums’ database leak exposed 323,986 users, including usernames, emails, IPs and metadata, as a security firm reviewing the dump confirmed its authenticity and noted some addresses appeared in clear text.
Trust Wallet disclosed that a supply chain incident tied to the November 2025 Shai-Hulud outbreak enabled the theft of about $8.5 million across 2,520 wallets, with a trojanised extension released on 24 December 2025 after GitHub secrets were exposed. Instagram denied a breach after claims circulated that data from roughly 17.0 million profiles had been scraped, while the SoundCloud breach affected 29.8 million accounts, exposing email addresses alongside profile information.
In the broader threat landscape, the Aisuru botnet was reported to have reached 31.4 Tbps in December telecom attacks, and underground forums continued to circulate scraped data, tracking threats across breaches in early 2026. According to Have I Been Pwned, the evolving exposure underscores the need for ongoing monitoring of identity data as it moves across forums and markets.