BRIEFLeaklowP45
Spanish database with IBAN details offered on DarkForums
Cuentas bancarias en España (entidad no identificada)
Detected2 November 2026 · 06:24 UTC
A DarkForums thread is offering a Spanish database containing IBANs, i.e. full account numbers usable for fraudulent direct debits and payment fraud. Neither the volume, the fields nor the originating financial institution are stated, so attribution and impact remain limited. Still, leaked IBANs are direct fuel for transfer fraud and impersonation against Spanish banks.
CategoryLeak
Severitylow
Priority score45
Detected2 November 2026 · 06:24 UTC
Leak● 45
Filtración de 679.000 documentos dirigidos al presidente de IndonesiaA DarkForums thread advertises 679K records described as transactions of letters and documents addressed to the President of Indonesia. The post is login-walled, so sample data and provenance cannot be checked, but correspondence of this type can contain citizen petitions, internal routing details and personal identifiers. It is relevant mainly to Indonesian public-sector defenders assessing exposure of citizen data.Leak● 58
Presunta filtración de 100M de registros de Raptor SuppliesA DarkForums thread advertises a 'full data dump' of Raptor Supplies, claiming 100M+ records tied to military, government and civilian contractors. The claim is unverified and the victim entity is not clearly described, but contractor contact and account data at that volume would fuel supply-chain phishing and BEC. Treat it as a claim requiring verification rather than a confirmed breach.Leak● 82
Base de datos del Gobierno de Colombia publicada por MortemteamBreachForums Leaks/Databases carries a thread by OscarElMasCapito offering a 'GOBIERNO DE COLOMBIA' database, the same actor linked to other Latin American government dumps. The post body is only partially visible, so record count and data types remain unconfirmed, but national government data would expose public servants and citizen records. Colombian state entities should treat this as a probable credential-exposure event.Leak● 58
Base de 980.000 filas con códigos de embajadas y bancos a la ventaA BreachForums seller (pfavre) is offering 980,000 rows of physical-security data, including door codes and access protocols, allegedly obtained from a Swiss secure-destruction and assembly service and covering embassies, major banks, telecoms and private villas. If genuine, the data enables physical intrusion rather than only data theft, raising the risk for diplomatic and corporate facilities. Country distribution is unknown, so Latin American missions and bank branches should be treated as potentially in scope.Leak● 70
Base de datos de Perú con más de 500.000 registros a la ventaA seller using the handle OscarElMasCapito is offering a Peruvian database of more than 500,000 records on BreachForums, including full names, national ID (DNI) numbers, ages and income data. The source organisation is not named, but the combination of DNI and income details is ideal for identity fraud, loan scams and impersonation. Peruvian banks and public services should expect credential stuffing and social engineering built on this data.Leak● 86
Filtración de datos del Gobierno de Tierra del Fuego, ArgentinaA BreachForums user (OscarElMasCapito) published a thread claiming a full database dump of the Gobierno de la Provincia de Tierra del Fuego, Argentina, in the Leaks/Databases section. The visible preview gives no record count or sample, but provincial datasets typically hold citizen records, staff accounts and internal contacts. Any confirmed dump gives attackers credential and phishing material against Argentine public-sector systems.