BRIEFLeakcriticalP78
Brazil 140 million PII database offered for sale
Detected27 October 2026 · 08:29 UTC
A seller ('moonsh1ne') on the DarkNetArmy forum just posted a 140 million+ record Brazilian PII database for sale, one of the largest regional leaks seen recently. Scale implies broad exposure of national identity data usable for fraud, account takeover and targeted phishing. Brazilian banks, telecoms and public services should treat it as a fresh exposure event.
CategoryLeak
Severitycritical
Priority score78
Detected27 October 2026 · 08:29 UTC
Leak● 62
Filtración de base de datos de 2,8 millones de clientes de TurkNetA threat actor on BreachForums is distributing a database reported to hold roughly 2.8 million TurkNet customer records, affecting Turkey's national fiber ISP. The exposed subscriber identities and contact data tied to a critical telecom provider enable targeted phishing, SIM-swap abuse, and account takeover. Telecom defenders and TurkNet users should treat subscribers' personal data and credentials as compromised.Leak● 42
Base de datos de Orange Rumanía filtrada y redistribuidaA Tor forum reposts a leaked Orange Romania database for download, though it is a 'repost' so the original exposure may be older. If it contains subscriber data it matters for telecom customers and downstream SIM-swap and phishing risk. Origin date and record count are unconfirmed due to the login wall.Leak● 52
Base de datos de compras y defensa del Ejército de Pakistán filtradaA forum thread advertises a leaked database of Pakistani military procurement and defense deals, posted on a Tor leak forum. If genuine, it exposes defense supply-chain details valuable for espionage and targeting. Defense procurement data is high-value for state and non-state intelligence actors.Leak● 42
Filtración de base de datos y acceso admin de foodtrack.frA leak combining a database dump and admin access to the French marketplace foodtrack.fr was shared as a freebie on the BlackBones carding forum on 19 August 2026. Admin-level access to a commerce platform enables tampering, further data theft and payment abuse. It is a genuine named-org compromise but dated and outside the AR-LATAM focus.Leak● 63
Filtración de base de datos PII de la mexicana CosmotiendaA PII database attributed to the Mexican retailer Cosmotienda was released on the BlackBones carding forum by user Jaded on 23 August 2026. Customer names, contact details and possibly payment data expose Mexican consumers to fraud and credential abuse. It is one of the few LATAM-targeted leaks worth monitoring even though it is a couple of months old.Leak● 60
Filtración de datos de pacientes del hospital indio Aakash HealthcareA database of patient records from Aakash Healthcare, an Indian hospital chain, was posted for free on BreachForums (bf.st) by user r4ng3r on 27 October 2026. Exposure of medical and personal data enables identity theft, targeted phishing and extortion against patients. Healthcare entities should treat it as confirmed and monitor for downstream fraud.