BRIEFLeakhighP52
9.5M-user database of Kyrgyz marketplace Lalafo offered for sale
Lalafo (Kirguistán)
Detected12 September 2026 · 10:12 UTC
A threat actor is advertising a database of the Kyrgyz classifieds marketplace Lalafo containing more than 9.5 million fresh user records. Leaked marketplace data typically exposes names, phone numbers, emails and hashed or cleartext passwords, enabling credential stuffing, phishing and large-scale account takeover. Defenders should treat the Lalafo credentials as compromised and watch for reuse across other services.
CategoryLeak
Severityhigh
Priority score52
Detected12 September 2026 · 10:12 UTC
Leak● 45
Base de datos del portal estatal ruso Gosuslugi ofrecida en foroUser DBHunter posted on DarkNetArmy a claimed 2025 database of gosuslugi.ru, Russia's unified government services portal used for benefits, tax and identity functions. If authentic, the records enable credential stuffing and identity fraud against a state platform, and reveal exposure patterns relevant to any public-sector identity service. The post is roughly seven weeks old and the underlying data is dated 2025, so it is not a fresh alert.
Leak● 48
Filtración de datos del gobierno de Pamekasan (go.id), IndonesiaForum member SUB-ZER0 posted on the DarkNetArmy onion forum a leak of data tied to pamekasankab.go.id, the site of Indonesia's Pamekasan Regency government, marked as posted today. Regional government records typically contain citizen identifiers and internal staff data, making this a genuine government breach rather than carding noise. Defenders should verify the scope and whether the dataset is being redistributed.Leak● 58
Filtración de 300.000 clientes de OrionTelekom (Serbia)A threat actor is offering a 300,000-customer database belonging to Serbian telecom OrionTelekom (oriontelekom.rs), including a sample for verification. Telecom subscriber data enables SIM-swap, phishing and identity fraud against customers and staff. It is a serious leak for a named critical-infrastructure operator, even though it sits outside the LATAM region.Leak● 41
Filtración de datos del distrito escolar de GettysburgA BreachForums post claims a Gettysburg Area School District database with ~976 rows and 464 SSNs. Even a modest school-district leak exposes minors', families' and staff SSNs, enabling fraud and phishing. District IT should confirm the leak and notify affected families.Leak● 48
Filtración de datos municipales de Niagara Falls con 1.141 SSNA BreachForums post advertises Niagara Falls municipal data with ~1,844 rows and 1,141 SSNs. Municipal exposure of SSNs enables fraud and phishing against residents and city staff. City security teams should assess the claim and alert affected individuals.Leak● 52
Filtración de datos del condado de Garrett con 2.000 SSNA BreachForums database post claims Garrett County government data with ~2,542 rows and 2,083 SSNs. A county government holding resident and employee SSNs is an attractive target for fraud and further intrusion. Local security teams should confirm the exposure and warn residents.