BRIEFLeakhighP62
Serasa Experian database leaked and offered for download
Serasa Experian
Detected5 October 2026 · 00:55 UTC
Serasa Experian, Brazil's largest credit bureau, is being offered as a full database download on BreachForums. Such dumps typically hold names, CPF, addresses, emails and credit data on hundreds of millions of Latin American consumers, enabling identity theft, loan fraud and phishing. For AR/LATAM banks and fintechs this is high-signal customer PII exposure worth monitoring for credential stuffing and fraud.
CategoryLeak
Severityhigh
Priority score62
Detected5 October 2026 · 00:55 UTC
Leak● 40
Base de datos de clientes de Cyprus Airways filtradaA thread dated 14 May 2026 offers a database of Cyprus Airways, the national carrier of Cyprus, for download. Airline customer databases typically contain names, contact details, booking and loyalty data, useful for phishing and fraud. The post is several months old and outside the AR-LATAM region, so it is informational rather than a fresh alert.Leak● 48
Filtración de herramientas forenses Cellebrite y MSABA post claims to leak Cellebrite and MSAB forensic tooling, the software widely used by law-enforcement and military digital-forensics units. Compromise of these tools could reveal extraction techniques and vulnerabilities that adversaries use to evade mobile forensics, with direct impact on government investigations. No date is visible, so treat as unverified but notable for CTI teams tracking LE tooling.Leak● 62
Filtración de base de datos de Caja San Rafael, MéxicoA database reportedly belonging to the Mexican savings/credit institution Caja San Rafael has been posted on BreachForums. Although described as 'small', it exposes customer and account records of a Latin American financial entity, enabling fraud and credential-stuffing against its clients. Defenders in the regional finance sector should verify exposure and monitor for follow-on attacks.Leak● 90
Filtración de base de datos del Tribunal Supremo de Elecciones de Costa RicaA full database of Costa Rica's Supreme Electoral Tribunal is offered for sale, reportedly around 3.75 million records. This is a national electoral authority, so exposure of citizen and voter data enables identity theft, phishing and electoral fraud. Defenders in the region should treat it as a confirmed government data breach.Leak● 28
Filtración de datos de estudiantes de la Universidad Cadi AyyadA free dump of 270 student records from Morocco's Cadi Ayyad University was published, including national ID (CIN), student numbers (CNE/APOGEE) and photos. The scale is small, but it exposes verified PII that enables identity fraud and targeted phishing of students and staff. It is outside the AR-LATAM scope, so it is mainly of background interest.Leak● 34
Combolist dirigido de 597.299 cuentas de AmazonA large combolist of roughly 597,000 Amazon-targeted credentials is being posted as fresh. Such dumps drive credential stuffing, account takeover and fraud using stored payment methods. Impact is partly mitigated by Amazon controls, but user reuse makes it worth a low-priority alert.