BRIEFLeakhighP55
Samsung database offered for sale on a criminal forum
Samsung
Detected17 September 2026 · 11:12 UTC
A freshly posted thread on a darkweb forum claims a Samsung database is up for grabs, potentially exposing customer or corporate records of the global electronics giant. If genuine, such data would support fraud, account takeover and targeted attacks. Authenticity and scale are unverified, so treat it as an unconfirmed lead.
CategoryLeak
Severityhigh
Priority score55
Detected17 September 2026 · 11:12 UTC
Leak● 40
Venta de dump del ERP de un colegio K-12 de Emiratos Árabes UnidosA seller on the BDF club forum is offering a dump of the ERP system of a K-12 school in the United Arab Emirates, claiming the data is current up to the extraction date. School ERP platforms typically hold student, staff and financial records, so the sale could expose minors and sensitive operations. It falls outside the LATAM region but shows active monetization of education-sector ERP data.Leak● 89
Filtración de base de datos del municipio de Moreno (moreno.gob.ar)User 'skyling' published on BreachForums a leak of a database tied to moreno.gob.ar, the domain of the Moreno municipality in Buenos Aires province, Argentina. The post does not state record volume, but it concerns a government entity, so exposed data could include citizen records, procedures and internal credentials. This is a fresh, region-relevant government leak that defenders of the Buenos Aires public sector should treat as a confirmed exposure.Leak● 45
Base de datos de 1,7 millones de usuarios de Nexo en circulaciónA xReactor thread advertises a 1.7-million-record customer database attributed to the crypto lending platform Nexo, including KYC-style identity data for a financially sensitive user base. The thread appears old (deep pagination, no fresh date), so it is not a new breach but still relevant for credential-stuffing and crypto-targeted phishing. Victims face high-value account takeover and extortion risk because balances and verified identities are involved.Leak● 80
Base de datos de millones de ciudadanos mexicanos a la ventaA DarkForums seller (Lyklekor) is offering a multi-million-record database of Mexican citizens, likely aggregated from electoral, civil registry or public-sector sources. Mexican citizen data fuels identity theft, credit fraud and targeting of public servants, and such dumps are usually split and resold in parts to evade detection. Fields such as CURP, RFC and address determine how exploitable the data is for downstream fraud.Leak● 89
Filtración de 1,1 GB de la Corte Superior de Justicia de Lima NorteA DarkForums actor (Lynfekor) published a 1.1 GB archive attributed to the Superior Court of Justice of Lima Norte, one of Peru's highest-volume judicial districts. Judicial archives typically contain case files, litigants' DNI and contact data, internal correspondence and staff accounts, exposing citizens, judges and clerks to extortion and targeting. Leaked judicial material can also reveal investigative details and protected witnesses.Leak● 94
Base de datos del RENIEC de Perú (31 millones) a la ventaA DarkForums actor (Jartezon) is advertising a 31-million-record extract of Peru's RENIEC national identity registry, the source of DNI numbers, full names, birth dates and addresses for essentially the entire adult population. A complete civil registry is the master key for mass identity fraud, SIM-swap, account takeover at banks and telecoms, and impersonation of public officials. Any Peruvian verification process that trusts DNI data alone must be considered compromised.