BRIEFLeakhighP58
Database of 31 million Israeli citizens offered on DarkForums
Israeli citizens
Detected4 November 2026 · 17:24 UTC
A user named Torramyr posted on DarkForums a dataset claiming 31.10 million records of Israeli citizens dated late October 2026. National citizen records typically combine identifiers, contact data and possibly more, enabling mass fraud and targeted attacks. Although outside Latin America, the scale makes it relevant for defenders tracking bulk identity exposure.
CategoryLeak
Severityhigh
Priority score58
Detected4 November 2026 · 17:24 UTC
Leak● 78
Base de datos del Gobierno de Brasil a la venta en BreachForumsA BreachForums thread advertises a database attributed to the Brazilian government, posted by actors using the handles MortemTeam, Narcos515 and KonataizumiLeaks. The exact record count and the specific agency are not visible, but leaks tied to federal or state entities in Brazil give attackers identity data, credentials and internal contacts useful for phishing and account takeover. Brazilian public-sector defenders should treat this as a possible exposure of citizen or employee data.Leak● 64
Filtración de 9 millones de registros KYC de BeatStarsA threat actor named Plaguinator is advertising a breach of BeatStars on DarkForums claiming 9 million KYC records. KYC datasets typically contain identity documents, addresses and financial details, making them high-value for fraud and account takeover. It matters for defenders monitoring identity-theft risk and for verifying whether real customer data is included.Leak● 88
Filtración de 5 millones de registros de Función Pública de Colombia (SIGEP)Actors on DarkForums are distributing an extracted database tied to Colombia's Función Pública (SIGEP), releasing 1 million records for free out of an alleged 5 million total. SIGEP holds public-employment and civil-service data, so exposure could reveal government employees' identities and account details. This matters for Colombian public-sector defenders assessing credential reuse and phishing against officials.Leak● 42
Publicación de una compilación de documentos no clasificados de la OTAN (2009-2024)A RaidForums thread, readable only after login, advertises a bulk compilation of NATO unclassified documents spanning 2009 to 2024. Because the material is unclassified, the impact is mainly aggregation and open-source exposure rather than disclosure of secrets. Analysts should verify authenticity and provenance before assigning any significance.Leak● 44
Base de datos con 363.752 perfiles personales de Nueva Jersey a la ventaA DarkForums seller offers 51,000 records that include credit card data plus 363,752 full personal profiles of New Jersey residents without card data. The combination of identity and payment information supports card-not-present fraud, account takeover and synthetic identity creation at scale. The volume suggests a consolidated regional breach rather than a small combolist.Leak● 52
Filtración de datos de la firma india de verificación First AdvantageA user named Gulravek is offering a downloadable leak of First Advantage, a background-screening company operating in India, on DarkForums. Such firms hold sensitive candidate and employee screening data, including identity and employment details. It matters for organizations whose workforce data may have been screened through this provider.