BRIEFLeakhighP40
Chinese security firm Integrity Technology Group database leaked
Integrity Technology Group
Detected17 September 2026 · 03:12 UTC
A database belonging to Integrity Technology Group, a Chinese cybersecurity and threat-intelligence firm, has been posted for download on a leak forum. Breach of a security vendor can expose internal tooling, customer data and intelligence sources, which may be abused to target its clients. The post dates from May 2026, so it is not a fresh alert but remains relevant for sector awareness.
CategoryLeak
Severityhigh
Priority score40
Detected17 September 2026 · 03:12 UTC
Leak● 48
Base de datos de la inmobiliaria malasia Mah Sing Group a la ventaThreat actor 'scarlettgroup' posted a database allegedly belonging to Mah Sing Group Berhad, a listed Malaysian property developer (mahsing.com.my), on DarkForums and BreachForums mirrors. Scope and record count are not visible, but corporate data from a listed developer typically includes customer, buyer and contact records. Such leaks fuel targeted phishing against property buyers and enable business email compromise against the firm's partners.Leak● 62
Base de datos del diario uruguayo la diaria a la ventaA cybercriminal thread on an onion forum advertises a database belonging to la diaria, a Uruguayan independent newspaper (ladiaria.com.uy). The thread is login-walled so the record count and price are unknown, but a media outlet in the region is a plausible target for subscriber and staff credential exposure. Leaked newsroom or subscriber data enables phishing against journalists and can be reused for account takeover.Leak● 30
Publicada una brecha de sitios .gov.ma (Marruecos)The actor 'fexus' posted a thread on BreachForums titled '.gov.ma websites breach', indicating data from Moroccan government sites. However, the post is dated mid-May 2026, roughly six months before today, so it is not a fresh alert and the specifics of the leak are not detailed in the captured text. It is a government-sector exposure but outside the Argentina/LatAm focus and already stale.Leak● 45
Filtración de 200.000 credenciales corporativas de Alemania (D4RKNETHUB)The D4RKNETHUB actor is distributing 'Part (6)' of a dataset containing roughly 200,000 German corporate email:password records, reposted across several forums including DarkNetArmy, Niflheim and HARD-TM. These mail:pass combos are directly usable for credential stuffing, account takeover and business email compromise against German companies. Fresh corporate credential sets like this are actively exploited for phishing and unauthorized access.Leak● 48
Filtración de 37.500 registros de pago de PayXpress (Israel)A BreachForums thread offers for download roughly 37,500 digital payment records (~7GB) attributed to the Israeli payment firm PayXpress. The data reportedly includes payment/transaction details, creating fraud and identity-theft risk for customers. Payment-processor leaks like this also enable downstream card and account fraud.Leak● 55
Presunta filtración de datos del gobierno de Coahuila (gob.mx)A BreachForums user (LulzSkid) posted what they claim is data taken from a Coahuila state government page on gob.mx, published in early November 2026. The scope is described vaguely ('random shi'), so the scale and sensitivity are unconfirmed, but any exposure from a Mexican state government portal is worth reviewing. This is the only fresh Latin American government-related item in the batch and should be validated quickly.