BRIEFLeakhighP72
Guayaquil Junta de Beneficencia database offered for sale
Junta de Beneficencia de Guayaquil (JBG)
Detected11 November 2026 · 01:43 UTC
A database attributed to the Junta de Beneficencia de Guayaquil (JBG), a major Ecuadorian charity that runs hospitals and social services, was posted on DarkForums by user WhiteLotus. The records likely include sensitive personal and health data of patients, donors and beneficiaries. This matters for Latin American health and social-service defenders because stolen patient data fuels fraud and extortion.
CategoryLeak
Severityhigh
Priority score72
Detected11 November 2026 · 01:43 UTC
LeakPriority 44
Registros de stealer del portal gubernamental Prakerja (Indonesia)User Mellirix posted 'Logs Prakerja Go.id Form Stealerlogs' on DarkForums on 11 November 2026, referencing infostealer credentials captured on the Indonesian government Prakerja training portal. The logs likely expose applicant and staff credentials tied to a .go.id domain. Government programs using such portals should treat this as a credential-compromise risk requiring reset and review.LeakPriority 48
Filtración de 140 millones de registros de Chaoxing XuexitongUser Amirxx60 posted a 'Chaoxin Xuexitong 2026 140M Leak' on DarkForums on 11 November 2026, claiming a large dataset from the Chinese learning platform Chaoxing Xuexitong. The figure overlaps with earlier known breaches of this platform, so much of the data may be recycled rather than new. It remains a large education-sector PII exposure but is of limited urgent relevance for Latin American defenders.LeakPriority 52
Conjunto de bases de datos de dominios .es de España a la ventaUser Mellirix advertised 'Spain .es databases' on DarkForums on 11 November 2026, offering collections of data from Spanish .es websites. Depending on scope, this can expose user accounts and personal data tied to Spanish organizations and consumers. Spanish defenders should treat it as a possible credential and PII exposure pending verification.LeakPriority 58
Filtración de 11,11 millones de registros de TheFoat.comUser MoonTheWolf posted a '[USA] TheFoat.com 11.11M' dataset for download on DarkForums on 11 November 2026. TheFoat is a US automotive classifieds platform, so the dump likely contains account and contact data of real users and dealers. Such large, fresh datasets enable credential stuffing and targeted phishing against the platform's user base.LeakPriority 64
Filtración de 539.737 datos personales del registro civil de Jakarta TimurA threat actor posted 539,737 records described as 'fresh' personal data from Dukcapil Jakarta Timur, Indonesia's civil-registry office, on DarkForums on 11 November 2026. This is national-ID-grade PII tied to a government source, which enables identity fraud and account takeover. Although outside Latin America, it is a large fresh government-data leak worth tracking for exposure monitoring.LeakPriority 54
Filtración de datos de BMW publicada en 13 partesA multi-part leak attributed to BMW is being released in 13 parts on DarkForums by Ilkfozar. Corporate data leaks of this kind can include internal documents, credentials and partner information useful for intrusion and extortion. The full scope should be assessed as more parts are published.