BRIEFLeakhighP66
Brazil Receita Federal database of 248M citizens for sale
Receita Federal (Brasil)
Detected10 September 2026 · 03:14 UTC
A seller is offering a database allegedly containing 248 million Brazilian citizens' records attributed to Receita Federal, the federal tax authority. The scale and sensitivity (tax identifiers, personal and financial data) make it a high-value asset for fraud and identity theft across Brazil. Freshness is uncertain—the dataset resembles a known older leak—but any LATAM government data sale warrants close monitoring.
CategoryLeak
Severityhigh
Priority score66
Detected10 September 2026 · 03:14 UTC
Leak● 58
Base de datos de 1,8 TB de kirbor.com publicada en foroA forum user is distributing a 1.8TB database attributed to kirbor.com, a volume that suggests a full corporate data store rather than a minor dump. If authentic it could expose customer records, credentials or internal documents from the victim organisation. Analysts should verify the entity's identity, sector and exposure scope before it spreads further.Leak● 86
Base de datos de 104 millones de vehículos de Brasil a la ventaA seller claims to be distributing a database of 104 million Brazilian vehicle records, one of the largest automotive/registration datasets to surface from Latin America. It likely contains owner names, CPF/ID numbers, plates and addresses, enabling identity theft, insurance fraud and physical targeting of vehicle owners. Brazilian and LATAM defenders should treat this as a fresh, mass-PII exposure.Leak● 50
Filtración de la base de datos del organismo electoral de Indonesia (KPU)A database dump attributed to Indonesia's KPU (General Elections Commission) is circulating, allegedly containing national ID numbers (NIK), family card data, full names and addresses. This is a large government dataset affecting citizens nationwide, valuable for identity fraud and targeted attacks. The post has no clear date and may be a repost of an earlier KPU breach, so treat freshness with caution.Leak● 38
ShadowByt3$ afirma haber vulnerado Ben Leeds PropertiesThe actor ShadowByt3$ claims to have breached Ben Leeds Properties and is publishing the data, in a post just minutes old. The incident may therefore be new and time-sensitive. However impact and scale are unverified and the victim is outside the AR-LATAM region, making this a low-priority monitoring item.Leak● 60
Base de datos de salud y seguros de Taiwán (2,9M líneas) a la ventaA seller is offering a 2.9-million-line database allegedly combining Taiwan health, medical and life insurance records for sale. If authentic, it exposes highly sensitive personal and medical data at scale, enabling identity theft and targeted fraud. Defenders in insurance/health should verify exposure and watch for downstream resale.Leak● 85
Base de datos bancaria de México publicada en foro clandestinoA database that appears to come from a Mexican bank is being sold on a cybercrime forum. It may contain account numbers, personal data, and transaction history, which are highly valuable for fraud and identity theft. This breach affects a critical financial institution in Latin America and requires urgent monitoring.