BRIEFLeakhighP45
Cambodia National Employment Agency database exposed
National Employment Agency of Cambodia (nea.gov.kh)
Detected26 October 2026 · 07:41 UTC
A database attributed to Cambodia's National Employment Agency (nea.gov.kh) was advertised on a cybercrime forum, indicating possible exposure of government employment records. Details sit behind a login wall, so the exact scale and freshness are unconfirmed, but it concerns data managed by a state agency. Any confirmed release of citizen and labor-market records raises identity-theft and targeted-phishing risks for the agency and jobseekers.
CategoryLeak
Severityhigh
Priority score45
Detected26 October 2026 · 07:41 UTC
Leak● 35
Filtración completa de Oriflame con documentos de verificación por paísesA long-running xReactor thread offers a full Oriflame leak that reportedly includes identity and verification documents from multiple countries. Such KYC material is highly sensitive and supports identity fraud and account takeover against the company and its distributors. It is flagged low because the thread is old and the data is not a fresh alert.Leak● 52
Base de datos de alumnos y padres del Lahore Grammar School (Pakistán)BreachForums users shared a database of students and parents from the flagship and elite campuses of Lahore Grammar School in Pakistan. The records expose personal details of minors and their families, who are prime targets for extortion and social-engineering scams. It matters to education-sector defenders because it is a targeted leak tied to a single named institution.Leak● 65
Base de datos PII de cosmotienda (México) publicada en BlackBonesA full PII database of Mexican customers tied to cosmotienda, dated 2026, was published freely on the BlackBones carding forum. The dump exposes personal data of Mexican users, enabling identity theft, phishing and account takeover against local consumers. It matters because it is a fresh, openly distributed LATAM consumer PII leak that raises fraud risk across the region.Leak● 42
Filtración de la base de datos de tarjetas de racionamiento de IrakThe database of Iraq's national ration card (PDS) system was posted on BreachForums by the user Herkan0, potentially exposing household and national ID data tied to millions of citizens. The post dates to January 2026, so it is not a fresh incident, but it remains a large government PII exposure. Defenders should note it for downstream identity fraud and impersonation risk against the covered population.Leak● 40
Base de 88 millones de registros de EE. UU. ofrecida en foroA long-running xReactor thread offers an '88 Million USA Database Full Info', a bulk identity dataset with personal records. Files of this size enable large-scale identity fraud and account takeover for US individuals and firms. The post carries no clear date and the thread is aged, so its recency must be confirmed before treating it as fresh.Leak● 55
Brecha de datos de Apollo.io (2026)xReactor threads discuss a 2026 data breach at Apollo.io, a B2B contact and sales-intelligence platform holding business and personal contact records at scale. Leaked contact data fuels phishing and account-takeover attempts against downstream customers and prospects. Organizations whose records sit in Apollo.io should treat those contacts as exposed and warn staff.