BRIEFLeakcriticalP88
Colombian Government database posted on DarkForums
Gobierno de Colombia
Detected5 November 2026 · 17:24 UTC
A DarkForums user (Krezqatorn) posted what is presented as a Colombian government database on 5 November 2026, suggesting a fresh exfiltration of public-sector records. The exact agency and record count are not disclosed in the listing, which raises the risk that citizen, tax or registry data is being circulated. Any leak of national government data in Colombia exposes citizens to identity fraud and gives attackers material for credential and social-engineering campaigns against public entities.
CategoryLeak
Severitycritical
Priority score88
Detected5 November 2026 · 17:24 UTC
Leak● 50
Filtración de datos del Ayuntamiento de París con 320.000 registrosDarkForums user Jarmujin posted a 320,000-record dump attributed to the Mairie de Paris on 5 November 2026, one of a wave of French leaks in the same batch. Municipal data often includes resident records and staff directories that enable targeted phishing against public services. It is outside the LATAM focus but is a real government entity with a sizeable exposure.Leak● 56
Base de datos de PII de la mexicana Cosmotienda a la ventaA BlackBones thread started 23 August 2026 advertises a Mexican PII database tied to Cosmotienda, marketed as a free sample to draw buyers. The dataset is not fresh by today's date, but customer PII from a national e-commerce site remains reusable for phishing, account takeover and card fraud. Buyers may already be testing the data against mail and payment providers.Leak● 62
Filtración multinacional con datos de más de 14 millones de menoresDarkForums user KaOsCracker posted a database advertised as 'MULTINACIONAL 14M+ MINORS', released on 5 November 2026. The scale and the fact the subjects are children make this a serious privacy and extortion risk regardless of the exact source country. Data on minors is rarely rotated or monitored, so it stays exploitable for years and fuels sextortion and identity fraud.Leak● 70
Filtración de 8 millones de registros de la aseguradora Axa FranciaDarkForums user Nolpamir posted a dump labelled 'Axa.fr +8M' on 5 November 2026, claiming roughly eight million records tied to the French insurer. If genuine, this is a mass exposure of customer and policy data that will feed insurance fraud, phishing and identity theft across Europe. Insurers are also prime ransomware targets because of the sensitivity of claims and health-adjacent data.Leak● 72
Credenciales de acceso de la fintech mexicana Creze filtradasDarkForums user karmy published a set of credentials attributed to Creze, a Mexican fintech lender, in a thread dated 5 November 2026. Even a modest credential set against a financial entity is high risk, since login reuse and weak MFA often open the door to customer and loan data. Defenders at Creze and its partners should assume account takeover attempts are imminent.Leak● 76
Base de datos completa del Gobierno de México (gob.mx) publicada en foroA DarkForums user (Frouzenx) posted a claimed full database linked to the Mexican federal government domain gob.mx; the thread is now closed and content removed, but the dump likely circulated before takedown. Such a release, if authentic, exposes citizen PII and potentially internal accounts tied to federal portals. Defenders should treat it as a possible precursor to credential stuffing and phishing against government services.