BRIEFLeakhighP38
50-million-record Indonesian database leaked
JakartaGhostDigital
Detected24 September 2026 · 00:51 UTC
A 50-million-record Indonesian database attributed to 'JakartaGhostDigital' is circulating on xReactor as a bulk data leak. The scale suggests a large collection of personal and account data tied to Indonesian users. Although outside Latin America, its volume keeps it relevant for cross-border fraud and credential-abuse monitoring.
CategoryLeak
Severityhigh
Priority score38
Detected24 September 2026 · 00:51 UTC
LeakPriority 38
Base de datos de Lazada RedMart filtrada para descargaA Lazada/RedMart database is being distributed for download on BreachForums, most likely a repost of an older large-scale breach affecting the Southeast Asian e-commerce and grocery platform. Even if not new, it contains customer PII useful for phishing and credential-stuffing against the region. The apparent age reduces immediate urgency but it is worth verifying exposure of any affected accounts.LeakPriority 48
Filtración de más de 200 millones de líneas de datos raspados de TwitterPosted on DarkForums in November 2026, this is a large dump of 200+ million lines of scraped Twitter/X data. Scrapes like this are frequently repackaged older datasets and mostly contain public profile and email data. It matters mainly for credential-stuffing and phishing reconnaissance rather than a fresh breach.LeakPriority 58
Venta de 13,3 millones de registros de la Administración del Seguro Social de EE. UU.A BreachForums seller claims to hold 13.3 million records tied to the US Social Security Administration. If genuine, SSNs and personal identifiers at this scale drive identity theft and benefits fraud. It is US-focused and the claim is unverified, so it ranks below confirmed regional compromises.LeakPriority 66
Filtración de 140 millones de registros de la plataforma china Chaoxin XuexitongPosted on DarkForums on November 7, 2026, a 140-million-record dataset attributed to Chaoxin Xuexitong (Chaoxing), a widely used Chinese education platform, is being leaked. At that scale it likely includes student and staff identities, contact data and credentials. Although not in Latin America, a leak of this size is a major credential-exposure event with global fraud impact.LeakPriority 82
Base de datos del banco BBVA México a la ventaA forum user is advertising a database attributed to BBVA México, one of the country's largest banks, in the Cracked.st 'Personal Finance' section. Bank customer datasets typically contain account identifiers, contact details and financial data that fuel fraud and account takeover. Compromise of a major Mexican bank is critical-infrastructure relevant for the region.LeakPriority 45
Filtración de 780.000 registros de recargas de apuestas en BrasilA database of roughly 780,000 gambling top-up records from Brazil has been posted on DarkForums. The data likely includes player identifiers and payment details, enabling fraud and account takeover against Brazilian betting users. While not government infrastructure, it is a sizable regional leak worth monitoring.