A threat actor claims to be selling a Forex Recovery Leads database covering the period from December 2025 to March 2026. The allegedly compromised dataset includes ID, full names, email addresses, phone numbers, countries, cities, ages, amounts lost, currencies traded, brokers, loss months, loss dates, lead sources, and lead status.