BRIEFLeaklowP44
Russian site ibiw.ru database (726K records) leaked
ibiw.ru
Detected21 September 2026 · 14:37 UTC
The 'AnkaTeam' group published a 726,000-record database allegedly belonging to the Russian site ibiw.ru. The dump contains personal and account data that can fuel credential-stuffing and targeted phishing against the company's users. It is a mid-sized but genuine breach of a named organization, notable mainly for the volume and the actor behind it.
CategoryLeak
Severitylow
Priority score44
Detected21 September 2026 · 14:37 UTC
Leak● 78
Datos de alumnos de 19 escuelas primarias de la Secretaría de Educación de México en ventaA DarkNetArmy post by SUB-ZER0 claims data from 19 primary schools under Mexico's Secretaría de Educación, covering minors, and was published today. Records tied to children carry an elevated duty of care: names, school affiliation and guardian contacts are highly sensitive and enable extortion, bullying and identity fraud. Educational authorities in the region should treat this as a serious breach given the vulnerable population involved.Leak● 85
Base de datos de 125.000 contribuyentes del gobierno de Coahuila, México, a la ventaUnder the handle SUB-ZER0, a listing on DarkNetArmy offers a database of roughly 125,000 contributors tied to the Coahuila state government in Mexico, published and bumped today. Taxpayer and contributor records typically include names, identifiers and contact data that enable identity theft and targeted fraud. Because the data is tied to a specific state government, it also provides credible pretext material for phishing campaigns impersonating Mexican tax authorities.Leak● 88
Base de datos del Gobierno de Colombia publicada en DarkForumsA DarkForums user (Krezqatorn) posted what is presented as a Colombian government database on 5 November 2026, suggesting a fresh exfiltration of public-sector records. The exact agency and record count are not disclosed in the listing, which raises the risk that citizen, tax or registry data is being circulated. Any leak of national government data in Colombia exposes citizens to identity fraud and gives attackers material for credential and social-engineering campaigns against public entities.Leak● 50
Base de datos de clientes de Phonehouse España a la ventaA consumer database attributed to the Spanish electronics retailer Phonehouse.es was posted for sale on DarkForums by user WSdatabase as a '2026' dataset. Customer records like these fuel phishing and account-takeover campaigns against Spanish consumers. Phonehouse and Spanish defenders should assess authenticity and notify affected customers.Leak● 55
Venta de datos de ciudadanos argentinos con DNI y correo electrónicoA seller on DarkForums is offering leads of Argentine citizens combining national ID (DNI) numbers with email addresses. DNI is a core identity document in Argentina, making the data valuable for account takeover and social engineering. Organizations serving Argentine users should watch for identity and credential abuse.Leak● 71
Filtración de base de datos del gobierno de São Paulo, Brasil, con 200.000 registrosA 200,000-record database tied to the São Paulo state government (SP.GOV) was published on DarkForums including names, CPF, phone numbers and emails. CPF is Brazil's national taxpayer ID, so the leak raises identity-theft and fraud risk for affected citizens. Brazilian public-sector teams should confirm the exposure and monitor for misuse of the data.