BRIEFLeakhighP62
100,000 Mexican credit and loan customer database for sale
Mexican credit/loan customers (unknown entity)
Detected8 November 2026 · 04:43 UTC
A seller on Cracked.st is advertising a database of about 100,000 Mexican credit and loan customer records. It exposes personal and financial details that enable identity theft, loan fraud and targeted phishing against Mexican consumers. Lenders and financial firms in Mexico should treat the data as exposed and watch for misuse.
CategoryLeak
Severityhigh
Priority score62
Detected8 November 2026 · 04:43 UTC
LeakPriority 42
Base de datos de MGM Grand Hotels publicada en foroA BreachForums post offers a downloadable MGM Grand Hotels database. It appears to be a repost of previously circulating hotel-guest data rather than a fresh breach, limiting operational urgency. Still, it exposes guest records reused in phishing and account-takeover attempts against hotel customers.LeakPriority 55
Base de datos de 87.000 registros de Panamá a la ventaA seller on Cracked.st is offering an 87,000-record Panama database, exposing personal data of Panamanian individuals or customers. Such data supports phishing, account takeover and fraud against local users. Panamanian organizations and service providers should assess whether their user records are included.LeakPriority 42
100.000 credenciales corporativas de Japón ofrecidas en la serie D4rkNetHubThe seller D4rkNetHub posted part 13 of a '100k CORPS Japan' dataset, indicating an ongoing large release of corporate accounts tied to Japanese organizations. Credential dumps of this type fuel phishing, credential stuffing and initial access against the affected companies. Organizations with Japanese exposure should monitor for reuse of leaked accounts.LeakPriority 72
Base de datos de un aeropuerto militar de EE.UU. filtrada en DarkForumsThe actor 'Crashed' published a database allegedly belonging to a US military airport on DarkForums on November 8, 2026. Military aviation data can expose personnel, operational schedules and system access details, making it valuable for targeting and follow-on intrusion. Defenders at military and aviation facilities should treat it as a real exposure until disproven.LeakPriority 38
Base de datos de Lazada RedMart filtrada para descargaA Lazada/RedMart database is being distributed for download on BreachForums, most likely a repost of an older large-scale breach affecting the Southeast Asian e-commerce and grocery platform. Even if not new, it contains customer PII useful for phishing and credential-stuffing against the region. The apparent age reduces immediate urgency but it is worth verifying exposure of any affected accounts.LeakPriority 48
Filtración de más de 200 millones de líneas de datos raspados de TwitterPosted on DarkForums in November 2026, this is a large dump of 200+ million lines of scraped Twitter/X data. Scrapes like this are frequently repackaged older datasets and mostly contain public profile and email data. It matters mainly for credential-stuffing and phishing reconnaissance rather than a fresh breach.