BRIEFLeakhighP85
Mexican bank database leak advertised on cybercrime forum
Banco mexicano no especificado
Detected9 September 2026 · 15:03 UTC
A database that appears to come from a Mexican bank is being sold on a cybercrime forum. It may contain account numbers, personal data, and transaction history, which are highly valuable for fraud and identity theft. This breach affects a critical financial institution in Latin America and requires urgent monitoring.
CategoryLeak
Severityhigh
Priority score85
Detected9 September 2026 · 15:03 UTC
Leak● 40
Combolist de 124.000 credenciales argentinas publicadoA 124,000-line combolist focused on Argentine users was posted to DarkForums on 2026-10-19. It is a credential-stuffing corpus rather than an org-specific database, so impact is diffuse but still relevant for account-takeover campaigns against Argentine services. Defenders in the region should screen these accounts and enforce MFA.Leak● 65
Venta de base de datos de la aseguradora japonesa Advance CreateA seller is offering a 4.6 million record database attributed to Japanese insurer Advance Create (advancecreate.co.jp) in the DarkForums marketplace. The scale points to customer and policyholder PII, which fuels identity theft and targeted fraud. Though outside the LATAM region, it is a concrete large-organization leak worth flagging for downstream exposure monitoring.Leak● 42
Filtración de código fuente de InsightsoftwareA BreachForums post shares what it claims is leaked source code from Insightsoftware, an enterprise finance/reporting software vendor. Source code exposure can reveal hardcoded secrets, vulnerabilities and internal logic exploitable against its customers. It matters mainly to organizations running Insightsoftware products, who should assess exposure and rotate any embedded credentials.Leak● 47
Presunta base de datos del Bank of America a la ventaA BreachForums thread advertises a 'Bank of America Database', a high-value target that, if genuine, would expose sensitive financial and customer records. Such claims for major banks are often recycled or fabricated, and the thread appears older (dated 'Monday June'). Verify authenticity before treating it as a live incident.Leak● 52
Filtración de registros de pacientes de Altru Health System (EE.UU.)A threat actor is sharing an Altru Health System patient dataset of about 70K rows with nearly 28K emails. The data is medical PHI, enabling identity fraud and follow-on phishing against patients. It is a concrete, sizable healthcare leak that defenders and downstream partners should track.Leak● 58
Filtración de datos de pacientes de Franciscan Health (EE.UU.)A BreachForums post offers a Franciscan Health patient database with roughly 107K data rows and over 84K emails. This is protected health information from a large US hospital network, exposing patients to identity theft and targeted phishing. Healthcare PHI leaks carry regulatory (HIPAA) and reputational weight and are attractive to fraud actors.