BRIEFLeakhighP74
Spain energy sector CUPS database leaked
Spain energy sector (CUPS)
Detected15 September 2026 · 11:12 UTC
A Spanish energy-sector database containing full CUPS supply-point identifiers is advertised on DarkForums. CUPS codes map subscribers to metering points, so the data is valuable for fraud, account takeover and targeted attacks against energy utilities. This is fresh critical-infrastructure data from a Spanish-speaking region and warrants verification of the source utility.
CategoryLeak
Severityhigh
Priority score74
Detected15 September 2026 · 11:12 UTC
Leak● 84
Base de datos de 600k empleados de salud de Sinaloa, MéxicoA fresh database of roughly 600,000 employee records from the Sinaloa state health sector in Mexico is being offered on DarkForums. Health-sector workforce data exposes names, roles and likely contact/credential details that enable targeted phishing and access to public health infrastructure. This is a LATAM critical-sector leak, so defenders should verify exposure and notify affected personnel.Leak● 42
Filtración de base de datos de la canadiense NL FisherA leak-forum post offers a database from the Canadian company NL Fisher (nlfisher.com). It likely holds corporate and possibly customer records usable for phishing and business-email-compromise attacks. The drop is recent but the victim is a small non-LATAM firm, so its operational priority is modest.Leak● 45
Base de datos de la estadounidense Mundt and Associates a la ventaA leak forum shows a database attributed to the US company Mundt and Associates (mundtinc.com) as a fresh drop. It may expose corporate contacts and client information that enable phishing and social-engineering against the company. Impact is contained to a small US business, so it ranks below region-relevant or critical-infrastructure leaks.Leak● 45
Filtración de base de datos de la empresa estadounidense KuhnlineA leak-forum post offers a database from the US company Kuhnline (kuhnline.com). It likely contains business contact and possibly client records, enabling phishing and invoice-fraud activity against the firm and its partners. It is a brand-new drop, but it concerns a small US company, so impact beyond that organisation is limited.Leak● 40
Base de datos de 5M usuarios de Animoto a la ventaA 5-million-user database for the video-creation platform Animoto (animoto.com) is being offered on a leak forum. If genuine, it exposes subscriber emails and account data usable for credential stuffing and phishing campaigns. However, the post dates to March 2026, so it is a stale re-post rather than a fresh breach.Leak● 68
Filtración de base de datos de la alquiladora española Record GoA threat actor just dropped a database allegedly belonging to Record Go, the Spanish car-rental company behind recordrentacar.com. It likely exposes customer PII such as names, ID/passport documents and contact details, enabling targeted phishing and identity fraud. As a large consumer-facing service, it carries serious reputational and GDPR compliance risk for the firm and its customers.