BRIEFLeakhighP82
Brazil SERASA (233M) and INCRA (8M) databases for sale
SERASA / INCRA (Brasil)
Detected16 October 2026 · 02:56 UTC
A seller is offering the Brazilian credit bureau SERASA (233 million records) alongside the INCRA/CAFIR rural-property registry (8 million records). These are massive datasets spanning consumer credit and land ownership, extremely valuable for identity fraud and financial crime. A leak of this scale in Brazil is a major critical-infrastructure and privacy event for the region.
CategoryLeak
Severityhigh
Priority score82
Detected16 October 2026 · 02:56 UTC
Leak● 48
Filtración de 12,4 GB de datos de GlobalAdmissions.com y China-Admissions.comA 12.4 GB dataset allegedly exfiltrated from GlobalAdmissions.com and China-Admissions.com is being shared, covering international student applicants and admissions data. Although China-focused, the data includes global applicants and can fuel targeted fraud and social engineering. Organisations working with these platforms should assess exposure and watch for re-use.Leak● 66
Filtración de 100.000 registros de múltiples sitios web mexicanosA DarkForums post is offering a database of 100,000 records sourced from multiple Mexican websites, published only minutes ago. The combined dataset likely includes emails, credentials and personal identifiers of Mexican users, enabling phishing and account takeover. Mexican organisations and CERTs should verify whether their users are included and warn affected parties.Leak● 72
Filtración de datos de la Universidad Kennedy de Argentina (47.000 registros)A DarkForums actor is freely distributing roughly 47,000 records allegedly belonging to Argentina's Universidad Kennedy, posted just minutes ago. The dump appears to expose personal data of students, staff and alumni, enabling phishing, credential stuffing and identity fraud. Argentine universities and their suppliers should treat this as a live exposure and monitor for downstream abuse.Leak● 72
Base de datos del municipio de Vicente López con 903.000 registrosA freshly posted database of the Vicente López municipality (Buenos Aires Province) with about 903,000 rows covering 2015-2026 is offered on a forum. It likely contains citizen or taxpayer records, exposing residents' personal data to fraud and social engineering. Municipal defenders should verify the exposure and warn affected residents.Leak● 80
Filtración de datos de la Policía de la Ciudad de Buenos AiresA threat actor published a second batch (PART2) of data from the Buenos Aires City Police, including facial photos of officers. The leak exposes law-enforcement personnel records that enable doxing, identity fraud and physical targeting of officers. It should be treated as a sensitive government breach requiring victim notification and monitoring.Leak● 45
Combolist de 142.000 credenciales argentinas publicada en foroA 142,000-line combolist of Argentine credentials is offered on a Russian-language forum. Although it is a combolist rather than a government database, it targets Argentine accounts and can fuel credential-stuffing and account takeover. Posted mid-2026, it is somewhat dated but still relevant for AR defenders.