PULSE
FEED
ransomemperador reclama a Carsem · MY · Manufacturingransomdoommageddon reclama a Koray Topaç Hukuk Bürosu · TR · Professional Servicesransomn0n reclama a Company #216 · BWransomvexy ransomware reclama a Franc-Oil · NG · Energy & Utilitiesransomvexy ransomware reclama a Osiiminppal · GLransomvexy ransomware reclama a Upper Web · BR · Technologyransomsafepay reclama a toyokiki-thailand.com · TH · Manufacturingransomincransom reclama a axiscades.com · IN · Manufacturingransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomemperador reclama a Carsem · MY · Manufacturingransomdoommageddon reclama a Koray Topaç Hukuk Bürosu · TR · Professional Servicesransomn0n reclama a Company #216 · BWransomvexy ransomware reclama a Franc-Oil · NG · Energy & Utilitiesransomvexy ransomware reclama a Osiiminppal · GLransomvexy ransomware reclama a Upper Web · BR · Technologyransomsafepay reclama a toyokiki-thailand.com · TH · Manufacturingransomincransom reclama a axiscades.com · IN · Manufacturingransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportation
Kalir Brief · Item29 September 2026 · 16:07 UTC
BRIEFGov / MilitaryhighP65

Alleged Israeli Air Force database posted for leak

Israeli Air Force (IAF)

Detected29 September 2026 · 16:07 UTC
Why it matters

A DarkForums actor claims to leak a database attributed to the Israeli Air Force (IAF). If genuine, exposure of military personnel or system data would be highly sensitive; even unverified, it is a named high-value military target worth tracking. Verify authenticity before acting.

MetadataRECORD
CategoryGov / Military
Severityhigh
Priority score65
Detected29 September 2026 · 16:07 UTC
Related items6
Gov / MilitaryPriority 30
Actor busca comprar información militar en DarkForumsUser 'stevedata' posted a standing buy request on DarkForums' Marketplace soliciting military information, a recurring demand signal rather than a named breach. It shows continuing underground appetite for armed-forces data, which defenders in defence ministries should monitor for patterns. No specific country, unit or dataset is referenced, so impact cannot be assessed yet.
15h
Gov / MilitaryPriority 55
Filtración de datos del Ministerio de Economía de IndonesiaA database linked to Indonesia's Coordinating Ministry for Economic Affairs was posted in DarkForums' Other Leaks section by user Kryvuxel. Leaks of government ministry data can expose officials' and partners' contacts and internal documents valuable for spear-phishing. No record count or date is shown, so the actual scale remains unconfirmed.
20h
Gov / MilitaryPriority 56
Datos del Ejército de Nigeria (OpNigeria) publicados en BreachForumsA BreachForums thread titled 'OpNigeria' advertises data attributed to the Nigerian Army. Military records are highly sensitive and can expose personnel and operational details. Although outside the AR-LATAM focus, this is a notable military-target leak worth flagging for regional defense-intelligence awareness.
1d
Gov / MilitaryPriority 85
Ransomware thegentlemen publica a la Municipalidad de Cieneguilla, PerúThe 'thegentlemen' ransomware group listed the Municipalidad Distrital de Cieneguilla, a district government in Lima Province serving roughly 100,000 residents. The listing references its citizen-facing platform for property tax queries and virtual document submission, implying exposure of resident and financial records. This is a fresh LATAM government victim and should be treated as an active incident.
1d
Gov / MilitaryPriority 76
Venta de acceso total a sistemas del Ministerio del InteriorA DarkForums actor is advertising complete access to the internal systems of a Ministry of Internal Affairs, published in the 'Leaks/Doxes For Sale' section on 12 November 2026. If genuine, this is a full government network compromise affecting police and interior-ministry records, identities and operational data, not just a single mailbox. Government CERTs and interior/security ministries should treat it as an active offer and verify whether the infrastructure matches any known exposure.
2d
Gov / MilitaryPriority 74
Filtración de base de datos de la UGEL Arequipa Norte, PerúA database labeled 'PERU: UGEL Arequipa Norte 2026' was posted in DarkForums' Leaks/Databases section, referencing the local education management authority of Arequipa, Peru. UGELs handle payroll and student data for public schools, so a leak could expose staff and student records. The post appears recent (2026) and targets Peruvian public-sector education.
2d