BRIEFLeakhighP76
Database of 596,652 Mexican citizens for sale (CURP and INE)
Detected8 October 2026 · 04:07 UTC
A marketplace listing offers a full identity database of 596,652 Mexican citizens including CURP, INE voter ID, and addresses. This is a rich LATAM identity-leak enabling fraud, SIM-swap, account takeover and government-service impersonation at scale. Mexican defenders, banks and identity providers should prepare for downstream abuse.
CategoryLeak
Severityhigh
Priority score76
Detected8 October 2026 · 04:07 UTC
Leak● 80
Base de datos de 3TB de Salesforce a la ventaA forum post dated October 8, 2026 advertises a 3TB database labeled 'SalesForce_2026' for sale. If genuine, a dump of this size from a CRM platform can contain massive volumes of customer, employee, and corporate records plus business intelligence. This is a fresh, high-volume leak that warrants immediate verification and victim notification.
Leak● 68
Filtración de base de datos de De Simoni & Piaggio (Uruguay)A database from the Uruguayan firm De Simoni & Piaggio was posted for download on BreachForums on October 8, 2026. The leak exposes records tied to a Latin American professional-services entity, which criminals can use for fraud and targeted phishing. Uruguayan and regional defenders should verify the exposure and watch for credential reuse.Leak● 72
Venta de base de datos de 102M clientes de Rakuten JapónA threat actor is selling a Rakuten Japan database containing roughly 102 million customer records on BreachForums. The scale makes it one of the largest customer-data offerings seen recently, enabling identity theft and account takeover across a major e-commerce and fintech group. Though outside LATAM, it shows the market's appetite for bulk PII.Leak● 60
Base de datos de 2TB de Jomar Electrical Contractors publicadaA 2TB database belonging to Jomar Electrical Contractors has been posted to a breach forum in early October 2026. The size suggests extensive operational, client or employee records. Electrical contractors sit in critical-infrastructure supply chains, so defenders should confirm scope, rotate exposed credentials and assess downstream exposure.Leak● 56
Base de datos PII mexicana de Cosmotienda filtradaA forum user is distributing a Mexican PII database tied to Cosmotienda (2026). Exposure of customer names, contacts and likely payment data enables identity theft and targeted phishing against Mexican consumers. Retail and fraud teams should verify the leak, notify affected customers and force credential resets.Leak● 35
Filtración de la base de datos SQL de helpachildofindia.orgA BreachForums user posted a full SQL database dump of helpachildofindia.org, an Indian children's charity, dated October 7, 2026. The dump likely exposes donor and contact records for a small NGO, which matters for the affected organization and for downstream phishing. Impact is limited and the entity is outside the Latin America region, so priority is low.