BRIEFLeakhighP56
PowerSchool student database posted on BreachForums
PowerSchool
Detected26 September 2026 · 20:16 UTC
A fresh post on BreachForums advertises a 'DATABASE PowerSchool', the widely used US K-12 student information system. PowerSchool is a high-value target because it stores student and staff records, so any new dump could fuel identity theft and targeted phishing against schools. Organizations using the platform should verify exposure and monitor for credential reuse.
CategoryLeak
Severityhigh
Priority score56
Detected26 September 2026 · 20:16 UTC
LeakPriority 62
Filtración de datos de la entidad financiera ecuatoriana SagrarioUnder the handle Pheisito, a thread on DarkForums was posted announcing a data leak tied to Sagrario, an Ecuadorian financial entity, and later closed by staff. Although the listing is closed, it signals stolen customer or financial records belonging to a LATAM financial institution. Such data feeds fraud, account takeover and regulatory reporting for Ecuador's banking sector.LeakPriority 66
Base de datos de 25 millones de clientes del Qatar National Bank a la ventaA DarkForums listing offers a 2026 database for Qatar National Bank containing roughly 25 million customer records and 28,000 employee records. QNB is one of the largest banks in the Middle East, so a leak of this scale would expose extensive KYC, contact and account data. It drives fraud, account takeover and regulatory risk, though the entity is outside Latin America.LeakPriority 30
Base de datos de Mathway filtrada y disponible para descargaRaidForums hosts a long-running thread circulating a Mathway user database for download. The dump is a well-known, older education-platform breach rather than a fresh incident, so its current defensive value is mostly historical. It remains useful for detecting reused credentials tied to Mathway among staff or customers.LeakPriority 63
Base de datos de 600.000 clientes de Japan Tourist Service a la ventaA seller on DarkForums is offering customer information for roughly 600,000 clients of the Japanese travel agency otsinternational.jp. If genuine, the dataset exposes personal and contact details of travellers, enabling targeted phishing and identity fraud. Any organisation handling travel bookings with this provider should treat related accounts and communications as potentially compromised.LeakPriority 54
Base de datos de 1,2 millones de registros de Transfast a la ventaA seller using the handle Marx posted on DarkForums a database of Transfast, a money-transfer/fintech provider, containing roughly 1.2 million records. Such data typically includes customer PII and financial details useful for fraud and account takeover. Organizations in the payments sector should verify exposure and monitor for misuse.
LeakPriority 93
Filtración de base de datos del Banco Central de Argentina (BCRA)A database attributed to the Banco Central de la República Argentina (BCRA) has been posted for distribution on BreachForums. The central bank is core financial and critical infrastructure, so any exposure of internal or customer data carries systemic risk. Defenders should treat this as a potential high-impact breach pending verification of scope and authenticity.