BRIEFLeakhighP74
Mexican bank MexBank database offered for sale
MexBank (México)
Detected10 September 2026 · 19:12 UTC
A seller on DarkNetArmy is offering a database attributed to the Mexican bank MexBank, tagged 2026 and posted today, suggesting a recent or freshly advertised collection. Banking datasets normally include account, customer and identity details, making this a serious exposure for the Mexican financial sector. If authentic, customers face fraud and the institution must urgently assess credential and PII exposure.
CategoryLeak
Severityhigh
Priority score74
Detected10 September 2026 · 19:12 UTC
Leak● 58
Filtración de base de datos de pasaportes e identidades de IsraelA threat actor posted a claim of a full database of Israeli passports and identity documents in the 2026 leaks section of the SpyHackerz forum. Passport and identity data enable large-scale identity theft, document forgery and targeted fraud. Although outside the AR-LATAM region, the volume and sensitivity justify monitoring for reuse of the data against regional targets.Leak● 32
Volcado de 5 millones de credenciales de stealer (url:log:pass)Actor 'Napoleon' posted a fresh dump of roughly 5 million url:log:pass stealer-log entries, part of an ongoing series of high-volume credential leaks. The volume makes it a sizable corpus for credential stuffing and account takeover, though no specific organization or region is identified. It carries no evident government or LATAM critical-infrastructure relevance.Leak● 40
Filtración de la base de datos de la tienda online de SFR (583k)A ~583,000-record dump of boutique.sfr.fr, the e-commerce site of French telecom operator SFR, is circulating on a breach forum. Telecom is critical national infrastructure, so customer PII and order data can power phishing, account takeover and SIM-swap fraud. The thread dates to January 2026, so it is a stale leak, not a fresh breach.Leak● 45
Filtración de base de datos de Brasil con 85 millones de registrosA database of 85 million records attributed to Brazil is offered on a dark web forum, one of the largest Latin American exposures seen. A leak this size can expose national IDs, addresses and credentials used for fraud and account takeover across the region. The thread dates to June 2024, so it is an old leak and not a fresh alert.Leak● 18
Base de datos del parlamento de Indonesia DPR.GO.ID (730K) filtradaA thread advertises the leaked database of Indonesia's parliament (dpr.go.id) with roughly 730,000 entries. The content is sensitive given the legislative target, but the dump is dated December 2024, so it is not a new incident. Its value now is contextual rather than actionable for an immediate response.Leak● 47
Base de datos 'PdiHealt' publicada en foro clandestinoA newly registered member posted a database file labelled 'PdiHealt_AS_Data' to a darkweb forum, pointing to an exposed health- or PDI-linked dataset. The volume and contents are not yet confirmed, but any medical or police-related records are highly sensitive for credential stuffing, identity theft and downstream fraud. Defenders in the health and public-security sectors should verify whether the data belongs to their organization.