BRIEFLeakcriticalP90
Zacatecas state government (gob.mx) database leaked
Gobierno de Zacatecas (zacatecas.gob.mx)
Detected2 October 2026 · 17:56 UTC
A database attributed to the Zacatecas state government (zacatecas.gob.mx) was posted for distribution on DarkForums minutes ago. Government databases can expose citizen records, internal credentials and services used by state agencies. Its leak raises the risk of fraud against citizens and of follow-on intrusion into public systems.
CategoryLeak
Severitycritical
Priority score90
Detected2 October 2026 · 17:56 UTC
Leak● 44
Filtración de base de datos del sitio español airedefiesta.esA database belonging to Spanish site airedefiesta.es is offered. It is a small services site, so impact is limited, but Spanish-language victim data retains regional relevance. It should be verified and, if confirmed, reported for data-protection follow-up.Leak● 46
Volcado masivo de 384 bases de datos SQL (31GB)A 31GB bundle of 384 SQL database dumps is posted. Aggregated dumps of this size often underpin credential-stuffing and account-takeover waves. Targets are unattributed, so the value lies in monitoring whether regional entities appear among the dumps.Leak● 48
Base de datos de Canva publicada a la ventaA 'Canva.com database' is being posted for sale or leak. Canva is a global design platform with hundreds of millions of users, so authentic customer data would enable phishing and credential reuse. The post appears to be a repost of older material, so treat as stale until freshness is confirmed.Leak● 52
Base de datos de clientes de la marca Under Armour a la ventaA customer database linked to US sportswear brand underarmour.com is offered for sale. Retail customer records support credential stuffing, phishing and account-takeover campaigns. Scale is unconfirmed, but the brand's size makes it worth monitoring for downstream fraud.Leak● 58
Filtración de cédulas de identidad de Trinidad y TobagoA leak of Trinidad and Tobago citizens' national ID cards and scans is being offered. Government-issued identity documents enable identity theft, synthetic-identity fraud and bypass of KYC controls. Although outside Spanish-speaking LatAm, it is a sovereign identity breach that regional partners should track.Leak● 74
Filtración de 20 millones de registros de clientes del ISP Free.frA 43.5GB dataset containing roughly 20 million Free.fr (Iliad) customer records is being redistributed for free. Telecom customer data at this scale fuels SIM-swap fraud, credential stuffing and targeted phishing against subscribers. As critical telecom infrastructure, this warrants immediate validation and notification planning.