BRIEFLeakhighP50
50 million Indonesian citizen records offered for sale
Indonesia (JakartaGhostDigital)
Detected14 September 2026 · 12:12 UTC
An actor using the handle JakartaGhostDigital is offering a database of roughly 50 million Indonesian records, a large-scale leak with heavy potential for fraud and account takeover. The volume makes it significant even though it is outside Latin America. No clear date is given, so freshness cannot be confirmed.
CategoryLeak
Severityhigh
Priority score50
Detected14 September 2026 · 12:12 UTC
Leak● 22
Filtración de documentos del banco argelino Crédit Populaire d'AlgérieDocuments attributed to Crédit Populaire d'Algérie, Algeria's state-owned bank, are circulating, with a separate actor claiming the hack. The material is dated June 2025, so it is stale rather than a fresh alert, but leaked banking/customer documents can still fuel fraud and account takeover. Useful mainly as actor and sector background.Leak● 55
Filtración de la base de datos de C&A Modas MéxicoA database belonging to Mexican retailer C&A Modas was posted for download on DarkForums, likely containing customer and possibly employee records. The retailer operates widely across Mexico and Latin America, so affected data is regional. Posted in late March 2026, it is not fresh but still fuels credential stuffing and targeted phishing against customers.Leak● 45
Filtración de base de datos de la eléctrica keniana KETRACOA database belonging to Kenya Electricity Transmission Company (KETRACO), a national grid operator, was posted for sale on a leak forum, exposing internal data. Targeting a power-transmission utility matters because such data can enable espionage or follow-on intrusion against critical energy infrastructure. Though outside Latin America, it is a genuine critical-infrastructure victim worth tracking.Leak● 40
Filtración de código fuente de Lacoste 2026A leak advertised as Lacoste.com source code plus internal documents and CRM data from 2026 surfaced on a leak forum. Exposure of proprietary code and customer CRM records can aid further attacks and expose customer PII. Though the brand is not regional, the leak is recent and concerns a major global retailer.Leak● 33
Venta de un millón de tarjetas de crédito argentinas y de otros paísesA dataset of roughly one million Argentine credit cards mixed with other countries is being traded on a forum. Although the card dump appears dated early 2025, its scale and Argentine financial focus make it relevant for fraud monitoring. Stale data reduces immediate urgency but still fuels card-not-present fraud and account takeover.Leak● 42
Filtración de datos de 263 GB de ciudadanos estadounidensesA 263 GB dataset claiming full names, addresses, income and family details of US citizens is being circulated. The scale is large enough to fuel identity fraud and targeted social engineering, though the victims are outside the Latin America region. Worth tracking for downstream abuse and data reuse across other leaks.