BRIEFLeaklowP46
486M Apollo.io B2B contact records offered for sale
Apollo.io
Detected18 September 2026 · 17:12 UTC
A seller is offering a 486M+ record dataset of business contacts (names, emails, phone numbers and company data) attributed to Apollo.io. It is a scraped/aggregated B2B corpus rather than a fresh breach, but its scale makes it valuable for targeted phishing and business-email-compromise against organizations worldwide, including in Latin America.
CategoryLeak
Severitylow
Priority score46
Detected18 September 2026 · 17:12 UTC
Leak● 50
Filtración de correos del Gobierno de Serbia en DarkForumsA threat actor using the handle Qelvitox published a batch of Serbian government email addresses on DarkForums on November 1, 2026. Government email lists feed targeted phishing, credential stuffing and BEC against public-sector staff. Even as addresses alone, they map the attack surface of Serbia's administration for follow-on intrusion.Leak● 55
Filtración de datos de las policías de Abu Dhabi y DubáiA DarkForums thread by 'Lucifer' shares what is presented as data belonging to the Abu Dhabi and Dubai police forces, with the discussion running to 19 pages. Police records can include officer, case and contact details whose exposure enables targeting, doxxing and social engineering. Although outside Latin America, it is a notable government data leak worth tracking as a reference for public-sector exposure.Leak● 40
Supuesta filtración de la base de datos de StripeAn xReactor thread claims a leak of Stripe.com data, now on page 5 of discussion, with no verifiable evidence or clear date in the extract. If authentic it would involve a major global payment processor, raising card-data and merchant exposure concerns. However, such 'Stripe DB' claims are frequently recycled or fabricated and require verification before action.Leak● 48
Filtración de datos de clientes del exchange Swyftx (Australia)A dataset of roughly 37,262 records attributed to the Australian crypto exchange Swyftx is being shared, with a file header indicating full customer entries rather than a bare email list. For a KYC-regulated financial platform this implies possible exposure of identity and account data of real users. It is not an Argentina/LatAm target, but it is a genuine named-organization leak worth flagging for fintech/crypto defenders and for anyone reusing credentials.Leak● 58
Filtración de datos sanitarios de WoundTech en BreachForumsA BreachForums thread advertises a fresh healthcare data breach at WoundTech, a US wound-care technology provider that handles patient records for clinics and home-care partners. Record counts and samples are not shown publicly, but protected health information is high-value for insurance fraud and extortion. Organizations contracting with the vendor should confirm scope and monitor for leaked patient data.Leak● 82
Base de datos del banco mexicano BanCoppel a la ventaA thread in DarkNetArmy's 'UNVERIFIED Sellers Market', posted by user Fallon$ on 2 November 2026, offers a database attributed to BanCoppel, one of Mexico's largest consumer banks. Scale and authenticity are unconfirmed, but customer PII and account details would enable fraud, phishing and account takeover. Mexican financial institutions should treat this as a live exposure and monitor for credential reuse.