BRIEFLeakhighP52
South Korean marketplace Karrot database for sale
Karrot (Danggeun Market)
Detected19 October 2026 · 05:39 UTC
A seller is offering a database tied to Karrot, South Korea's large second-hand marketplace with tens of millions of users. If genuine, the dataset would contain user PII at significant scale, useful for fraud and credential abuse. It is outside the LATAM region but a sizable real-org leak worth validating.
CategoryLeak
Severityhigh
Priority score52
Detected19 October 2026 · 05:39 UTC
Leak● 45
Correo oficial de la telco chilena VTR Comunicaciones filtradoA post claims the official email account of Chilean telecommunications operator VTR Comunicaciones was leaked, a critical-infrastructure-adjacent target. The scope appears limited and the post looks older, so it is lower urgency, but telecom email compromise can enable business email compromise and lateral abuse. Worth noting for defenders tracking Chilean telecom exposure.Leak● 55
Brecha en la infraestructura del Ministerio de Finanzas de Afganistán (1,4 TB)A forum post advertises a 1.4 TB breach of the Afghanistan Ministry of Finance described as a complete infrastructure compromise, though the thread is login-walled and undated. If genuine, this is a large-scale government data exposure relevant to regional risk and to tracking actors who resell nation-state data. It sits outside Latin America, so priority for AR/LATAM defenders is contextual rather than immediate.Leak● 88
Base de datos del Poder Judicial de Honduras (488k registros) a la ventaA threat actor has posted a database allegedly belonging to the Judicial Branch of Honduras (gob.hn), containing about 488,000 records, and the listing appears fresh. Judicial data can include case parties, identities and contact information highly valuable for fraud, doxing and pressure on officials. This is a direct hit on a Latin American government institution and warrants immediate validation.Leak● 92
Filtración de base de datos con 1M de ciudadanos de Río NegroA 2 GB dataset claimed to contain data on roughly one million citizens of the Argentine province of Río Negro is being released, attributed to multiple collaborators. Provincial citizen databases typically hold DNI, contact and address details useful for identity fraud, phishing and targeted attacks against public services. Defenders in Argentine government should treat this as a live exposure and verify scope.Leak● 72
Base de datos de la fintech estadounidense Dave filtrada para descargaA downloadable database attributed to Dave, a US fintech/banking app with millions of customers, has been posted for free download. Such a leak typically exposes customer PII and financial details, enabling fraud, account takeover and phishing. Defenders in financial services should verify the authenticity and scope of the exposure.Leak● 32
Base de datos de Miruasia/Kandora filtradaA PwsForums thread advertises a database belonging to the Asian drama streaming platforms Miruasia/Kandora, likely exposing customer account records; the size is unconfirmed behind the paid section. Not tied to AR-LATAM government or critical infrastructure, so relevance is limited, but credential reuse could affect linked downstream accounts for defenders.