BRIEFLeakhighP46
125GB US SSN database published on cybercrime forum
Detected5 November 2026 · 22:43 UTC
DarkForums user Halvvutir posted a 125 GB dataset advertised as a US Social Security Number database, the kind of bulk identity material used for synthetic identity fraud, account takeover and loan fraud. It is not tied to a single named organisation, so attribution is impossible, but its scale makes it relevant for fraud and KYC teams. Latin American firms serving US customers or handling US identifiers should account for downstream abuse.
CategoryLeak
Severityhigh
Priority score46
Detected5 November 2026 · 22:43 UTC
LeakPriority 58
Base de datos de Colombia a la venta en DarkForumsOn 5 November 2026, user M1y4ku posted 'DB colombia-OFB' in DarkForums' Databases section, advertising a Colombian database. The entity behind the data is not named, but any freshly presented Colombian dataset can contain citizen or organizational records relevant to national defenders. Analysts should obtain a sample to identify the affected organization and scale before it circulates further.LeakPriority 72
Filtración FortiBleed 2026 expone credenciales de FortinetA database leak labeled FortiBleed 2026 was published on DarkForums' Databases section on 5 November 2026 by user Roxym3ln. The naming strongly suggests exposure of Fortinet/FortiGate VPN credentials and configuration data, which are widely deployed to protect government, military and critical-infrastructure networks across Latin America. Leaked VPN credentials are a direct initial-access vector for perimeter compromise.LeakPriority 38
Filtración de la base de datos de pasaportes de IsraelA SpyHackerz thread by user spainfederal offers what is described as a full Israeli passport and identity database, published in July 2026 and still circulating. If authentic, it would expose passport numbers, national IDs and personal details useful for identity theft and border-fraud schemes. The post is roughly four months old, so it is a background reference rather than a fresh alert.LeakPriority 54
Filtración de 689.000 registros de PajEmploi (urssaf.fr)DarkForums user Halvvutir published a database reportedly containing 689,000 records tied to PajEmploi, the French URSSAF portal used for declaring and paying domestic employees. The data likely includes employers, employees, social-security identifiers and salary information, a rich target set for tax-themed phishing and fraud. French public-sector payroll exposure also matters to European organisations handling similar data.LeakPriority 55
Datos de vigilancia del aeropuerto de Shanghái filtradosA DarkForums post by Marrrazil claims to release data linked to Shanghai Suishenma, related to airport surveillance systems. Surveillance and access-control data from an airport is critical-infrastructure material that can reveal physical security weaknesses, camera locations and personnel information. Aviation and transport operators in other regions should treat it as a real-world exposure risk indicator.LeakPriority 58
Base de datos de la farmacéutica Aurobindo Pharma a la ventaDarkForums user Halvvutir published a thread offering a database belonging to Aurobindo Pharma, a major Indian generic-drugs manufacturer that supplies medicines globally, including to Latin American markets. Pharma data leaks can expose supplier, employee and commercial records that enable business email compromise and supply-chain fraud. The size and contents are unverified, so validation is required before relying on it.