BRIEFLeaklowP20
1,000 valid email accesses from Brazil for sale
Detected28 July 2026 · 19:53 UTC
A small combolist of 1,000 valid email accesses from Brazil is being sold. While Brazil is in Latin America, the volume is low and not specifically targeting government or critical infrastructure. However, it could be used for password spraying or phishing campaigns against Brazilian users.
CategoryLeak
Severitylow
Priority score20
Detected28 July 2026 · 19:53 UTC
Leak● 38
Filtración de 214.064 registros de usuarios de fitness1.bgA dataset of 214,064 user records from the Bulgarian fitness chain fitness1.bg, including names, emails, phones and addresses, has been leaked. The PII supports phishing, credential stuffing and physical targeting of members. It is outside the AR-LATAM region and moderate in scale, so it is a secondary item for regional defenders.Leak● 48
Base de datos búlgara de 3,2 millones de contactos a la ventaA seller is offering a fresh 3,196,563-record Bulgarian database spanning crypto, business and gambling leads. Large, sector-tagged contact lists fuel phishing, fraud and account-takeover campaigns against the named verticals. Defenders and fraud teams in those sectors should assume their customer data may be circulating.Leak● 52
Venta de 11,4 millones de documentos de identidad españoles (The Negratas)A seller known as The Negratas is offering 11.4 million Spanish identity documents, a huge PII trove enabling identity theft, fraud and account takeover. The thread dates to June 2026, so it is not a fresh alert, but the volume and sensitivity keep it relevant for Spanish-speaking defenders tracking downstream abuse.Leak● 62
Filtración de 2 GB de código fuente de un programa gubernamental español (PSOE)A 2 GB archive said to contain the source code of a Spanish government program linked to the PSOE party is being shared on DarkForums. Source-code leaks expose hardcoded credentials, API keys and internal endpoints, giving attackers a roadmap for follow-on intrusions. Spanish public-sector defenders should hunt for exposed secrets and monitor abuse of leaked endpoints.Leak● 66
Filtración de datos del contratista de defensa Rheinmetall DefenceA forum user is leaking data attributed to Rheinmetall Defence, a major European defence and arms manufacturer, posted within the last hours. Defence-sector leaks can expose supplier relationships, technical documents and partner networks across allied and LATAM procurement chains. Freshly posted, so time-sensitive for monitoring and attribution.Leak● 54
Filtración de documentos internos de la Autoridad Reguladora Nuclear de PakistánA forum thread (mirror of the same claim) advertises a 2026 set of internal safety and modification documents attributed to Pakistan's Nuclear Regulatory Authority. If genuine, it exposes sensitive material from a nuclear oversight body. Outside the region, but a high-impact critical-infrastructure leak worth tracking.