BRIEFLeakcriticalP82
Database of Ecuadorian financial entity Sagrario exposed
Sagrario (entidad financiera, Ecuador)
Detected10 November 2026 · 18:43 UTC
A threat actor posting as 'Pheisito' published a database belonging to Sagrario, a financial entity in Ecuador, on the DarkForums leak section. A leaked financial-sector database can expose customer PII, account details and internal records, fueling fraud, account takeover and targeted phishing against clients. Because it involves an Ecuadorian banking institution and appears freshly posted, it warrants immediate verification.
CategoryLeak
Severitycritical
Priority score82
Detected10 November 2026 · 18:43 UTC
LeakPriority 46
Presunta filtración de base de datos de la firma de seguridad ADTA BreachForums thread claims a database breach of ADT, Inc., a large US home-security and monitoring provider. Data from a security vendor can expose customer accounts, addresses and monitoring details that enable fraud or physical targeting. The scale and date are not visible, so treat it as an unverified claim, but flag it given the victim's role in physical security.LeakPriority 56
Base de datos de 10 GB del banco brasileño Sicoob a la ventaAn xReactor thread offers a roughly 10 GB database attributed to Sicoob, a major Brazilian financial cooperative system. A data set of this size from a banking institution can include customer PII, account and contact data useful for fraud and targeted campaigns. It sits in a long, multi-page thread, so freshness is uncertain, but the target is high-value financial infrastructure in Latin America.LeakPriority 48
Filtración de datos de clientes de 268 hoteles en FranciaA client file covering 268 hotels in France was posted for download on DarkForums on November 10, exposing guest records and contact data. Such hospitality datasets are valuable for phishing, payment fraud and targeted attacks on travelers and corporate accounts. Because the post is fresh, the affected hotels should assess the exposed data and notify customers under GDPR.LeakPriority 40
Filtración de la base de datos de 7,7 millones de ArmorGamesA plaintext email:password dump of 7.7 million lines attributed to gaming platform ArmorGames is circulating on the Niflheim forum. Since the credentials are exposed in clear text, they enable immediate credential-stuffing and account takeover against affected users. The thread appears to be a repost of an older breach, so it is partially stale but still actionable for password-reuse risk.LeakPriority 27
Filtración de datos biométricos de Shakira y Sofía VergaraA DarkForums thread offers biometric data of Colombian artists Shakira and Sofía Vergara, including documents and images. Although celebrity-focused, it shows leakage of sensitive biometric identifiers that cannot be reset, raising impersonation and privacy risks. Colombian entities handling biometrics should review protections.LeakPriority 40
Exposición de 8.000 documentos de seguros de Neighbors Insurance AgencyA DarkForums post offers access to roughly 8,000 US health and auto insurance documents from Neighbors Insurance Agency. The files likely contain policyholder PII and sensitive health information. Although small in volume, exposed insurance records enable identity theft and targeted fraud against affected customers.