BRIEFLeakhighP72
Serasa Experian database with 223 million Brazilians for sale
Serasa Experian
Detected5 October 2026 · 15:34 UTC
A seller offers a 1.8 TB dump of roughly 223 million Brazilian citizens' records from Serasa Experian, the country's largest credit bureau. It exposes CPF, addresses and financial profiles usable for identity theft and fraud targeting consumers and banks. Relevant to LATAM fraud monitoring even if it re-posts an older leak.
CategoryLeak
Severityhigh
Priority score72
Detected5 October 2026 · 15:34 UTC
Leak● 42
Combo de 300K credenciales de España a la ventaA 300,000-line Spain email:password combo was posted on DarkNetArmy forums, freshly dated October 2026. Such lists fuel credential-stuffing against Spanish users and services. It is a broad combolist rather than a targeted breach, so the impact is diffuse.Leak● 45
Filtración de documentos internos de New American FundingA freebie post shares a leak of internal documents from US mortgage lender New American Funding, said to include client information. Mortgage records expose financial and personal data useful for fraud and identity theft. No post date is visible, which lowers confidence in how fresh it is.Leak● 58
Filtración de datos del partido CDU de Itzehoe (4,6 GB)A 4.6 GB archive attributed to the local CDU branch in Itzehoe, Germany was published on RaidForums. Political party data can include member lists, donor details, internal communications and credentials, useful for phishing and influence operations. It is fresh but outside Latin America, so regional impact is limited.Leak● 60
Base de datos del seguro de salud de Taiwán a la ventaA seller is offering roughly 4.5 million lines allegedly from Taiwan's national health insurance system. Health data is highly sensitive and enables medical fraud, identity theft and targeted social engineering. Posted in late September 2026 it is still recent, though it concerns a non-LATAM entity.Leak● 56
A la venta lista de 700.000 clientes de Coinbase de varios paísesA seller advertises a Coinbase lead set of about 700,000 records across many countries, dated late September 2026. If genuine it supplies names and contacts that fuel phishing and account-takeover against crypto users. Worth flagging for financial defenders, though it may be scraped rather than breached data.Leak● 42
Combolista masivo de 656 millones de credenciales a la ventaA threat actor is selling a 656,289,112-line MAIL:PASS credential list covering USA, France, Germany and UK accounts on a hidden forum. The sheer scale makes it a ready-made resource for credential stuffing and account-takeover campaigns at volume. Defenders should enforce MFA and watch for password-spray activity against corporate mail, though the dump is generic rather than tied to a specific organization.