BRIEFLeakcriticalP92
Ecuador National Police database offered on underground forum
Policía Nacional del Ecuador
Detected11 September 2026 · 20:12 UTC
An actor (Synq1xxs) posted a database attributed to Ecuador's National Police, minutes after posting. If authentic it would expose personnel, contact and possibly operational records of a national law-enforcement agency, enabling targeted phishing, identity impersonation and follow-on intrusion. This is a direct government/national-security matter for Ecuador and the region and should be verified and contained urgently.
CategoryLeak
Severitycritical
Priority score92
Detected11 September 2026 · 20:12 UTC
Leak● 44
Filtración de base de datos del bufete Adams and Reese LLPA database attributed to the US law firm Adams and Reese LLP has been posted for download on a RaidForums clone, exposing the firm's internal data. Law firms hold highly sensitive client, litigation and corporate records, so such leaks enable fraud, extortion and follow-on targeting of clients. The record count and freshness are not visible in the thread, so the leak may be a repost of older material.Leak● 84
Filtración de la base de datos de Argensoft en Argentina (831.968 registros)A threat actor is advertising a database belonging to Argensoft, a software provider for private clinics in Argentina, containing 831,968 individuals' records. The data likely includes patient personally identifiable information and health-related details tied to the country's healthcare sector. This is a high-impact exposure for Argentine healthcare organizations and their patients, enabling targeted phishing, identity fraud and further credential abuse.Leak● 38
Filtración de la base de datos de CarMax atribuida a ShinyHuntersThe ShinyHunters group posted a CarMax customer database on the Spear Leaks forum, exposing records of the large US used-car retailer. However, the thread is dated January 2026, roughly nine months old, so it is not a fresh alert and the data has likely circulated widely already. It matters only as background for credential-stuffing and fraud monitoring against the retailer's customers.Leak● 25
Filtración de datos de 130.000 usuarios de BumbleA moderator on the Spear forum posted a 130k-user dataset tied to Bumble.com, dated March 2026. Though now months old, leaked profile and contact data can fuel targeted phishing and account-takeover attempts against users. Bumble users and trust-and-safety teams should remain alert to impersonation scams leveraging the exposure.Leak● 45
Base de datos de 6 GB de NTC Group a la ventaA 6GB database attributed to NTC Group (ntcgroup.com) is being offered on a Russian-language leak forum behind a login wall. The size suggests a broad dump of customer or internal records, though the exact contents and date are unverified. Partners and customers of this vendor should assess whether their data is included.Leak● 58
Filtración de tarjetas de 17.000 clientes del ICICI BankA forum post advertises a data leak affecting ICICI Bank, India's largest private-sector bank, exposing credit card details for roughly 17,000 customers. Compromised card data feeds card-not-present fraud and bank-impersonation phishing. Although the exact date is unclear, financial data leaks of a major bank warrant attention from fraud and CTI teams.