BRIEFLeakhighP45
7.3M passenger database of Russian airline Pobeda for sale
Pobeda (flypobeda.ru)
Detected22 September 2026 · 16:43 UTC
A 7.3 million-record database of international passenger leads tied to Russian carrier Pobeda (flypobeda.ru) is being offered in a dark forum. If genuine, it exposes large-scale PII of travellers, useful for targeted phishing and travel-fraud campaigns. Large aviation datasets are high-value for social engineering across borders even outside the region.
CategoryLeak
Severityhigh
Priority score45
Detected22 September 2026 · 16:43 UTC
Leak● 30
Base de datos de pasaportes rusos (540M) del MVD a la ventaA seller lists a 540-million-row Russian passport table attributed to the MVD, the interior ministry. It is a mass government identity dataset with major fraud potential, but the underlying data is from 2023 and the listing is old, so it is not a new breach. Useful only as background on state-ID exposure.Leak● 42
Filtración de la base de datos de la firma cripto Swan BitcoinA Spear forum leak dated 14 February 2026 claims a database dump of Swan Bitcoin, a US crypto platform. If real it exposes client KYC and account data usable for targeting crypto holders and account takeover. It is several months old, so it is context for trend tracking rather than a fresh alert.Leak● 50
Base de datos de ciudadanos del Reino Unido con fullz a la ventaA post dated 26 July 2026 offers a 'UK citizens database' with fullz, names, addresses and identity data. The fullz nature makes it valuable for identity theft and account takeover, though it is about two months old and outside the fresh-alert window. Treat it as high-impact PII for fraud monitoring.Leak● 68
Nueva filtración de base de datos de TAP Air PortugalA seller on DarkNetArmy is advertising a freshly obtained database belonging to TAP Air Portugal (flytap.com), posted within the last hour. If genuine it could expose customer PII, bookings and loyalty data of a national flag carrier. Verify the sample and watch for credential reuse and follow-on fraud.Leak● 54
Base de datos con 2,6 millones de teléfonos de INDmoney a la ventaAn actor is offering a database of roughly 2.6 million phone numbers linked to INDmoney, an online trading and investing platform. Although not in the LATAM region, a fintech user base of this size enables SIM-swap, phishing and account takeover at scale. The exposure should be validated and affected users warned.Leak● 68
Venta de 7,3 TB de datos del ISP jamaicano islandnetjm.comAn actor is selling 7.3 TB of data allegedly taken from the Jamaican ISP islandnetjm.com. A volume this large for a telecom provider likely includes customer records, credentials and internal operational data, enabling downstream fraud and network abuse. Caribbean telecom breaches are relevant to LATAM defenders given shared infrastructure and regulatory overlap.