BRIEFLeaklowP30
Indonesia's Dukcapil civil registry database posted
Dukcapil (Indonesian civil registry)
Detected2 November 2026 · 17:24 UTC
User Jax7 posted a database attributed to Indonesia's Dukcapil civil registry, which holds national identity numbers, addresses and family records. The thread dates from 9 February 2026, so it is months old and likely already circulated; it remains relevant for identity-fraud and KYC-bypass abuse but is not a fresh alert.
CategoryLeak
Severitylow
Priority score30
Detected2 November 2026 · 17:24 UTC
Leak● 42
Base de datos del registro civil Dukcapil Madiun (Indonesia) publicadaA RaidForums thread publishes a download of the Dukcapil civil-registry database for Madiun regency, Indonesia, which normally holds national ID numbers, family records and addresses. Government identity registries are the highest-value source for synthetic identity fraud and KYC bypass, but the thread appears to be an older repost rather than a new breach. It is worth cataloguing for regional identity-fraud trends rather than alerting as a fresh incident.Leak● 50
Presunta filtración de 11 millones de registros de la francesa ChronopostA DarkForums post advertises an 11-million-record dataset attributed to Chronopost, the French parcel arm of La Poste; the body is login-walled so only the headline claim is visible. Shipping data of that size typically includes names, addresses, phone numbers and tracking numbers, the exact raw material for parcel-phishing campaigns. French logistics and e-commerce customers could see convincing fake delivery notices within days if the data is real.Leak● 55
Afirman filtración de base de datos de Bank of AmericaA DarkForums thread advertises a leaked Bank of America database, though the body is behind a login wall and only the title is visible, so the volume and authenticity are unconfirmed. Claims against a top-tier bank are often recycled or fabricated, but if real they would enable large-scale phishing and account-takeover attempts against customers. Monitoring for re-posted samples and credential reuse is warranted until the claim is disproven.Leak● 88
Filtración de la base de datos del Proyecto Chavimochic (gob.pe)User OscarElMasCapito published on BreachForums a database belonging to Proyecto Chavimochic, Peru's flagship irrigation and water-infrastructure programme under the gob.pe domain. Posted today (2 Nov 2026), the dump exposes government project data such as staff, supplier or citizen records that can fuel phishing, invoice fraud and follow-on intrusion into public-works systems.Leak● 50
Filtración de la base de datos de WorkL.comA BreachForums thread claims a database leak from WorkL.com, a digital workplace intelligence platform used by enterprises for employee surveys and analytics. Such dumps usually carry corporate emails, names, roles and survey responses that feed spear-phishing and business email compromise. Client companies should treat their employee addresses as exposed.Leak● 58
Filtración de datos de 23,4 millones de usuarios de NotVPN/SplitVPNAn xReactor thread advertises a SplitVPN/NotVPN dataset with 23.4 million user accounts, 58 million connection logs and 13.6 million devices. The logs can tie accounts to real IP addresses and usage times, aiding account takeover and de-anonymisation. Organizations should assume employee VPN credentials may be circulating.