BRIEFLeakhighP74
Colombian EPS health insurance enrollee database for sale
EPS (sistema de salud de Colombia)
Detected21 October 2026 · 01:39 UTC
A threat actor is advertising a database containing enrollee records from Colombia's EPS public health-insurance system, which aggregates affiliation and personal data for millions of citizens. Such datasets expose national ID numbers, contact details and health-coverage status, enabling identity theft, social-engineering and targeted fraud against patients. Health-sector data in Latin America is critical infrastructure-adjacent, so defenders should validate the claim and monitor for downstream credential-stuffing against EPS portals.
CategoryLeak
Severityhigh
Priority score74
Detected21 October 2026 · 01:39 UTC
Leak● 74
Base de datos de Farmapatria (Venezuela) con 3 millones de registros, republicadaA threat actor has reposted a database attributed to farmapatria.com.ve, the Venezuelan state food-distribution company under the national food ministry, claiming roughly 3 million records. If the data is current, it exposes names, ID numbers and contact details of state food-programme beneficiaries and staff, enabling targeted phishing, identity fraud and social engineering against a government supply-chain entity. Even as a repost it should be validated for freshness and pushed to Venezuelan CERT and food-ministry defenders.Leak● 18
Filtración de 11 millones de credenciales de PoshmarkA thread advertises an 11 million-record Poshmark email:password combolist. Poshmark suffered a widely reported breach exposing millions of accounts, so this matches an older, resold dataset rather than new access. Low urgency, but it confirms ongoing trafficking of its users' credentials for account takeover.Leak● 25
Base de datos de clientes de Under Armour a la ventaDarkForums lists a customer database for underarmour.com in its 'Databases' section. Under Armour disclosed a 2018 breach of roughly 150M accounts, so this is almost certainly a repackaged or resold copy rather than a fresh intrusion. Only mildly useful as a reminder of credential-stuffing and phishing exposure for its user base.Leak● 50
Base de datos de Jaguar Land Rover filtrada en un foroA BreachForums thread advertises a leaked Jaguar Land Rover database available for download. The automotive manufacturer has suffered significant prior intrusions, so this may be a repost of older data rather than a fresh breach, which lowers urgency. Still, it is a named high-profile enterprise dataset worth verifying for freshness and downstream credential/PII exposure.Leak● 57
Filtración de datos de DoorDash publicada en un foroA thread dated 19 October 2026 offers a DoorDash data set for download on DarkForums. DoorDash is a large food-delivery platform, so any leaked customer, courier or merchant data carries fraud and account-takeover risk. Although it is not a LATAM or government target, a fresh large-org leak is worth tracking for downstream credential and PII abuse.Leak● 80
Filtración de base de datos de la aseguradora ARS Meta Salud (Rep. Dominicana)A full database belonging to ARS Meta Salud, a Dominican Republic health insurer, has just been posted for download on DarkForums. Health insurers hold sensitive patient and policyholder PII (names, IDs, coverage, contact data), making this a high-value leak for fraud and phishing. Defenders in the LATAM health sector should treat this as a fresh, region-relevant exposure and monitor for credential stuffing and social engineering against members.