BRIEFLeaklowP30
Peru RENIEC database with 31M citizens re-posted
RENIEC (Perú)
Detected19 October 2026 · 23:39 UTC
A forum post re-shares a 31 million-record database attributed to Peru's national identity registry RENIEC, tagged 2023. Despite the scale and sensitivity of national ID data, the dataset is clearly old and has circulated before, so it is not a fresh breach alert. It remains relevant background for identity-fraud and impersonation risk against Peruvian citizens.
CategoryLeak
Severitylow
Priority score30
Detected19 October 2026 · 23:39 UTC
Leak● 55
Filtración de datos de cointracker.ioA DarkForums poster claims a leak of the cryptocurrency portfolio-tracking service cointracker.io, published roughly eight hours ago. Such a leak could expose user emails, wallet-linked holdings and account data, raising phishing, account-takeover and targeted-theft risk for crypto holders. Fresh and tied to a named real service, so worth validating the dataset sample and size.Leak● 56
Venta de bases de datos brasileñas en BreachForumsA seller in BreachForums' marketplace is advertising an 'updated' set of databases sourced from Brazil, a LATAM jurisdiction of direct interest. If genuine, this represents bulk exfiltrated records of Brazilian organizations being monetized, enabling fraud, credential stuffing and downstream intrusion. The post is undated and vague on volume and victims, so scope needs confirmation before treating as fresh.Leak● 40
Filtración de datos del sitio gubernamental indio ICAR PuneA five-hour-old post claims a database leak from ataripune.icar.gov.in, a subdomain of India's agricultural research council. Government research portals often hold staff and research data useful for phishing and reconnaissance against public institutions. It is outside the Latin American focus but still a genuine government-domain exposure.Leak● 45
Base de datos filtrada del emisor iraquí de tarjetas QiCardA new DarkForums thread advertises a leaked database from QiCard, Iraq's main national payment-card provider. Compromised cardholder or subscriber data from a payment system carries direct financial-fraud and account-takeover risk. Scale and authenticity are not yet evidenced, so verification is required.Leak● 50
Venta de la base de datos de Motos del Oriente (Colombia)A seller is offering a database of about 207,000 records from the Colombian motorcycle dealer Motos del Oriente. Customer PII from a retailer supports phishing, credit application fraud and impersonation of buyers. It is a modest but regional leak worth tracking for Colombian consumer and financial-sector defenders.Leak● 50
Venta de 10 millones de datos personales de Thrive Online GroupA seller lists roughly 10 million PII records belonging to South Africa's Thrive Online Group for sale on a private forum. The volume and personal-data nature make it valuable for identity theft and large-scale phishing against South African consumers. Details are login-walled, so scope and recency still need independent confirmation.