BRIEFLeaklowP38
527,000-record global crypto email database for sale
Detected20 September 2026 · 04:37 UTC
A 527,000-record database of cryptocurrency-related email addresses is being offered for sale on a leak forum, aggregating holders worldwide rather than a single named Latin American target. It is not a fresh regional compromise, but crypto users face targeted phishing and wallet-drainer lures built from these lists. Worth monitoring for downstream campaigns, though immediate regional impact is limited.
CategoryLeak
Severitylow
Priority score38
Detected20 September 2026 · 04:37 UTC
Leak● 46
Filtración de base de datos de Fasul Educacional en BrasilA database reportedly containing email addresses and phone numbers tied to Brazil's Fasul Educacional (fasuleducacional.edu.br) is being redistributed on a breach forum as a repost of a 2025 incident. Even though it is not fresh, the data can fuel phishing, credential stuffing and social engineering against a Latin American education institution. Regional defenders should treat the exposed emails and phones as compromised identifiers and monitor for downstream abuse.Leak● 60
Se ofrecen 723.000 registros de clientes de DoorDash y otras marcasA 723K-record dataset claimed to include DoorDash, BWW and other customer data is marketed as fresh 2026 private data with many 'hits'. Large PII/credential dumps fuel account takeover and card fraud across food-delivery and retail users. Fraud and identity teams should monitor for reuse of these credentials on other services.Leak● 55
Filtración de datos de residentes de Hong Kong: 2,8M filas con nombres, teléfonos y HKIDAn actor is selling a 2.8M-row dataset of Hong Kong residents containing names, phone numbers and HKID numbers. Government-issued identity numbers enable impersonation, account takeover and fraud at scale. Although outside AR-LATAM, large national PII sets like this feed downstream attacks and are worth tracking for fraud and identity-abuse detection.Leak● 80
Base de datos de Vivo Brasil con 28 millones de líneas filtradaAn actor is distributing a database attributed to Brazilian telecom Vivo with roughly 28.1 million lines. Telecoms are critical infrastructure, so subscriber and customer records from a major regional carrier carry high risk of SIM-swap, phishing and credential-stuffing. LatAm telco defenders should verify exposure and hunt for reuse of leaked identifiers.Leak● 65
Filtración de base de datos de la empresa colombiana Interrapidísimo (661K)A 661K-record database attributed to Colombian courier Interrapidísimo is being posted for leak/sale. Shipping firms hold names, addresses, phone numbers and tracking IDs that enable parcel scams, phishing and identity fraud against customers. LatAm defenders and the company should confirm scope and warn users about impersonation.Leak● 26
Filtración de la base de datos de Lockstation.co.ukA forum user posted a leaked database belonging to Lockstation.co.uk, a UK-based company, which could expose customer or account records. The post is dated October 2025, so it is months old and not a fresh alert, and the impacted entity is a UK firm outside the Latin America focus. It is retained only for context; no immediate action is warranted.