BRIEFLeakhighP55
Mexican PII database of Cosmotienda customers for sale
Cosmotienda
Detected8 November 2026 · 12:43 UTC
A threat actor is distributing a Cosmotienda customer PII database, a Mexican e-commerce platform, on BlackBones. The dump exposes personal data of Mexican consumers and is a strong base for phishing, identity fraud and account takeover. For a LATAM operator this is a concrete local victim with real consumer impact worth prioritizing.
CategoryLeak
Severityhigh
Priority score55
Detected8 November 2026 · 12:43 UTC
LeakPriority 40
Filtración de la base de datos de MyFitnessPal publicada en BreachForumsA BreachForums thread shares a MyFitnessPal_BF.7z database archive for the fitness app. The content likely overlaps the well-known 2018 MyFitnessPal breach of over 140 million accounts, so it is probably a re-release rather than a new compromise. Still useful for credential-stuffing checks against users of the service.LeakPriority 48
Base de 30 millones de contactos de ZoomInfo a la ventaA seller on NulledBB advertises 30 million fresh business leads attributed to ZoomInfo, the business-data platform. The dataset is huge and likely scraped or leaked customer/contact records usable for targeted B2B phishing and social engineering. Organizations in the exposed pipeline should expect credential-phishing attempts referencing their staff data.LeakPriority 55
Filtración de base de datos de 6 GB de la empresa de telecomunicaciones ServetelBreachForums hosts a 6 GB archive titled with the name of Servetel, a communications/telephony solutions provider, indicating a leaked corporate database. Telecom datasets typically contain customer records, contact details and service data useful for phishing and account fraud. Defenders in the telecom sector should verify whether their data is included and assess exposure of customer PII.LeakPriority 72
Venta de base de datos con 2 millones de CPF y fotos de brasileñosA listing on the BreachForums marketplace offers a dataset of roughly 2 million Brazilian CPF numbers paired with photos. The CPF is Brazil's national taxpayer identifier, used for banking, government services and identity checks, so combining it with facial images strongly enables identity theft, account takeover and KYC fraud at scale. Brazilian fraud, banking and public-sector teams should treat this as a high-risk PII exposure.LeakPriority 90
Base de datos de licencias del Estado de México (172 GB) a la ventaA 172 GB database labeled 'LICENSES EDO MEX 2026' was posted for sale on DarkForums by user 'alina' on 8 November 2026, apparently containing State of Mexico government licensing records. Datasets of this type normally carry full names, addresses, CURP/ID numbers and license details of millions of citizens, enabling identity theft and targeted fraud. Mexican agencies and financial, telecom and health providers should treat the data as compromised and watch for downstream abuse.LeakPriority 52
Base de datos de Panamá con 87.000 registros a la ventaA marketplace thread on Cracked.st lists a Panama-focused database of 87,000 records for sale or trade. The sector and fields are not shown, but a sizable Panama dataset matters for Latin American defenders because it may contain credentials or personal data reused in further attacks. Analysts should obtain samples to confirm scope and notify affected entities.