BRIEFLeakhighP52
India database of 850 million records offered for sale
Detected16 September 2026 · 20:12 UTC
A threat actor is advertising an 850-million-record database sourced from India. The scale implies aggregated personal, telecom or citizen data, making it highly useful for identity fraud, phishing and credential-stuffing. Although it is not specific to Latin America, leaks of this size are frequently resold and recycled across forums, so it warrants tracking.
CategoryLeak
Severityhigh
Priority score52
Detected16 September 2026 · 20:12 UTC
Leak● 52
Filtración de datos del club La Reserva de SotograndeA DarkForums thread dated 31 Oct 2026 markets an 'exclusive 2026' database of La Reserva Club Sotogrande (Spain) claiming 31.10M wealthy client records. The volume is likely inflated, but member contact and financial details of a high-net-worth clientele fuel targeted fraud and social engineering. Firms serving affluent clients in Spain should assess exposure.Leak● 54
Filtración de datos de la plataforma CoinTracker.ioA DarkForums post by 'Quagazan' on 31 Oct 2026 advertises a leak of cointracker.io, a crypto tax and portfolio platform. Such services store user identities, wallet addresses and financial records, making the data valuable for phishing and account takeover. Users of crypto-tax platforms should watch for credential and identity exposure.Leak● 56
Base de datos filtrada del sistema de pagos iraquí QiCardA thread by 'Quagazan' on DarkForums dated 31 Oct 2026 advertises a leaked database from QiCard, Iraq's national payment card switch. As core financial infrastructure, its customer and card data is high-value for fraud, card cloning and account takeover. Payment and banking partners in the region should assess the claim and coordinate with QiCard.Leak● 62
Brecha de base de datos del exchange BitMartA poster ('Galmolox') announced an 'official' BitMart.com database breach on DarkForums on 31 Oct 2026. Crypto exchanges hold KYC identity documents, emails and balances, so a real leak would expose users to phishing, SIM-swap and account takeover. BitMart customers and exchange security teams should verify the claim and monitor accounts.Leak● 66
Filtración de DNI y correos de ciudadanos argentinosA seller ('Torvwetol') posted on DarkForums on 31 Oct 2026 offering Argentine leads combining DNI (national ID number) and email addresses. Although the exact volume is unconfirmed, DNI-linked contact data enables identity fraud, targeted phishing and account takeover against Argentine residents. Banks and public-facing organizations in Argentina should treat this as a live PII exposure.Leak● 47
Filtración de 31 GB de DNI, tarjetas y datos de empresas de ChinaA 31.10 GB dump labelled 'CHINA - ID Cards - Credit Cards - Business Information (Part 2)' is posted on DarkForums. It bundles identity documents, payment cards and corporate records, a high-value package for fraud and impersonation; organizations exposed to Chinese KYC data should treat it as compromised.