BRIEFLeaklowP28
Brazilian CPF and personal records database offered for sale
Ciudadanos de Brasil
Detected16 September 2026 · 15:12 UTC
A DarkForums post is offering a database of Brazilian CPF numbers together with personal details of citizens. The dump is not recent (early 2025) and the scale is unstated, but CPF-linked identity data can fuel fraud, account takeover and synthetic identities. It remains marginally relevant for LATAM defenders because the exposed PII persists long after posting.
CategoryLeak
Severitylow
Priority score28
Detected16 September 2026 · 15:12 UTC
Leak● 52
Filtración de datos del club La Reserva de SotograndeA DarkForums thread dated 31 Oct 2026 markets an 'exclusive 2026' database of La Reserva Club Sotogrande (Spain) claiming 31.10M wealthy client records. The volume is likely inflated, but member contact and financial details of a high-net-worth clientele fuel targeted fraud and social engineering. Firms serving affluent clients in Spain should assess exposure.Leak● 54
Filtración de datos de la plataforma CoinTracker.ioA DarkForums post by 'Quagazan' on 31 Oct 2026 advertises a leak of cointracker.io, a crypto tax and portfolio platform. Such services store user identities, wallet addresses and financial records, making the data valuable for phishing and account takeover. Users of crypto-tax platforms should watch for credential and identity exposure.Leak● 56
Base de datos filtrada del sistema de pagos iraquí QiCardA thread by 'Quagazan' on DarkForums dated 31 Oct 2026 advertises a leaked database from QiCard, Iraq's national payment card switch. As core financial infrastructure, its customer and card data is high-value for fraud, card cloning and account takeover. Payment and banking partners in the region should assess the claim and coordinate with QiCard.Leak● 62
Brecha de base de datos del exchange BitMartA poster ('Galmolox') announced an 'official' BitMart.com database breach on DarkForums on 31 Oct 2026. Crypto exchanges hold KYC identity documents, emails and balances, so a real leak would expose users to phishing, SIM-swap and account takeover. BitMart customers and exchange security teams should verify the claim and monitor accounts.Leak● 66
Filtración de DNI y correos de ciudadanos argentinosA seller ('Torvwetol') posted on DarkForums on 31 Oct 2026 offering Argentine leads combining DNI (national ID number) and email addresses. Although the exact volume is unconfirmed, DNI-linked contact data enables identity fraud, targeted phishing and account takeover against Argentine residents. Banks and public-facing organizations in Argentina should treat this as a live PII exposure.Leak● 47
Filtración de 31 GB de DNI, tarjetas y datos de empresas de ChinaA 31.10 GB dump labelled 'CHINA - ID Cards - Credit Cards - Business Information (Part 2)' is posted on DarkForums. It bundles identity documents, payment cards and corporate records, a high-value package for fraud and impersonation; organizations exposed to Chinese KYC data should treat it as compromised.