BRIEFLeaklowP28
BELFOR ASIA database posted on underground forum
BELFOR ASIA
Detected4 October 2026 · 04:55 UTC
A post advertises a leaked database attributed to BELFOR ASIA, a regional restoration/insurance services firm. If genuine it exposes customer and operational data useful for fraud and BEC. Detail is thin and scale is unconfirmed, so it is a marginal item pending verification.
CategoryLeak
Severitylow
Priority score28
Detected4 October 2026 · 04:55 UTC
Leak● 40
Combolist de 113.000 credenciales filtradas de PerúA 113,000-line email:password combolist attributed to Peru was posted, exposing reusable credentials of Peruvian users. Although it appears to be recombined older breaches and is several months old, it remains useful for credential stuffing against the country's banking and government services. Defenders should force password rotations and watch for anomalous logins.Leak● 50
Filtración de base de datos de 2,5 millones de ciudadanos de Bekasi, IndonesiaA database claiming 2.5 million records of Bekasi City citizens is posted for leak, likely including national IDs, addresses and personal data. Mass PII leaks of municipal populations enable identity fraud and downstream government-targeted phishing. It illustrates the risk profile that Latin American municipal/government databases share and is worth a defender's attention.Leak● 58
Filtración de 3,8 GB de documentos de drones militares UAV de Corea del SurA 3.8 GB archive of South Korean military UAV/drone documentation is being leaked on underground forums, exposing technical specs and program details. Leaks of this size on defense drone programs are strategically sensitive and can aid adversary reverse-engineering or targeting. Though outside the AR-LATAM region, it signals active exfiltration of military technical data worth tracking for CTI.Leak● 28
Filtración de datos de vehículos de Indonesia en DarkForumsUser 'WH1SP3R' published a freshly posted leak of what is described as Indonesian vehicle data on DarkForums. Vehicle registration datasets usually contain owner names, addresses, plate numbers and national IDs, which are directly usable for identity theft and fraud. The target is outside Latin America, but it is a fresh large-scale data leak that regional actors could recycle for social engineering or account takeover.Leak● 40
Nuevas bases de datos filtradas publicadas en BreachForumsBreachForums user 'dragonsec' posted a brand-new thread (dated 4 October 2026) advertising multiple breached databases. The specific victim organisations and record counts are not visible, but fresh multi-database dumps on a major leak forum typically spread quickly and are reused for credential stuffing and fraud. Defenders should watch for their own domains and user lists appearing in this material.Leak● 72
Base de datos de GameStop con 27 millones de registros a la ventaA threat actor is offering a 27-million-record GameStop database containing email:password combinations, claiming a value around $800M. Dumps of this size directly fuel credential stuffing and account takeover against the retailer and its customers. Defenders should force credential resets, watch for reused passwords and monitor for downstream fraud.