BRIEFLeakhighP48
Database of fintech Blend.com offered for sale on a forum
Blend.com
Detected19 October 2026 · 00:39 UTC
A Cracked.st seller is advertising a 'HQ database' of blend.com for sale, with a duplicate thread claiming freshly dumped data. Blend provides lending and account-opening software used by US banks and mortgage lenders, so any real dataset could carry customer PII and loan application data. The post date and record count are unverified, so validate sample data before alerting downstream financial-sector partners.
CategoryLeak
Severityhigh
Priority score48
Detected19 October 2026 · 00:39 UTC
Leak● 68
Base de datos de FireColombia publicada en un foroA freshly published thread offers a database attributed to FireColombia, an emergency/fire-response related Colombian organization, posted within minutes of collection. Emergency-service data can expose internal contacts, personnel and operational details useful for social engineering or disruption. Colombian emergency and public-safety bodies should confirm the scope of the leak and treat any exposed credentials as compromised.Leak● 76
Filtración de empleados de la Secretaría de Educación de Guerrero (SEG)A forum actor is distributing what is advertised as a database of more than 70,000 employee records belonging to Guerrero State's Ministry of Education (SEG) in Mexico. Public-sector payroll and staff data enables targeted phishing, credential stuffing against government portals and identity fraud against civil servants. Mexican state entities should verify exposure of SEG accounts, force resets and watch for follow-on intrusion attempts.Leak● 93
Base de datos de PetroEcuador/PetroAmazonas expuesta en BreachForumsA BreachForums user posted a download thread claiming an exposed database belonging to PetroEcuador/PetroAmazonas, Ecuador's state-owned oil and gas operator. Scale and exact contents are not confirmed in the listing, but a leak affecting a national energy company can expose employee credentials, internal systems and supplier data used by operational technology. Defenders in Ecuadorian energy should treat this as a possible precursor to intrusion or extortion and hunt for credential reuse.Leak● 66
Filtración de base de datos de la utility AES Indiana (3,2M filas)A BreachForums post offers a database for aesindiana.com, a US electric utility, reportedly containing about 3.28 million data rows and 328,263 email addresses. Utilities are critical infrastructure, making exposure of customer/operational emails valuable for phishing and BEC. Even outside LATAM, this is a large dataset tied to a real critical-infrastructure operator and deserves review.Leak● 38
Filtración de código fuente y datos de SmartGPS (Brasil)A DarkForums thread advertises leaked source code and data from SmartGPS, a Brazilian GPS/tracking service (smartgps.com.br). The post is dated January 2026, so it is roughly nine months old and not a fresh alert. Still relevant for LATAM defenders given tracking/telemetry data and code exposure, but low urgency now.Leak● 50
Paquete privado de 75 millones de credenciales ULP a la ventaA seller is offering a private 75-million-line URL:LOGIN:PASSWORD stealer-log bundle dated today, indicating very large fresh credential exposure. It is not tied to a single named victim but fuels credential stuffing against web logins across many organizations. Defenders should treat it as a fresh corpus for password-reuse and session-hijack risk, and prioritize MFA and credential resets.