BRIEFLeaklowP45
Instagram scraped dataset with 17 million records
Detected19 October 2026 · 12:39 UTC
A 17-million-record dataset scraped from Instagram's API in 2026 is being shared. While based on public profile data, at this scale it fuels account enumeration, targeting and credential-stuffing against users and brands. Social-media and brand-protection teams should be aware of the dataset's circulation.
CategoryLeak
Severitylow
Priority score45
Detected19 October 2026 · 12:39 UTC
Leak● 54
Filtración de 1,5 millones de transacciones de QRIS IndonesiaA BreachForums thread is distributing what it claims is a database of about 1.5 million QRIS transactions, Indonesia's national QR payment standard used by banks and merchants nationwide. Though outside Latin America, it is a direct example of national payment-rail data being traded openly, which is useful context for defenders of similar systems such as Pix or Mercado Pago. Scale and freshness of the dataset are unverified and should be treated as unconfirmed.Leak● 64
Filtración de datos de RRHH de Philip Morris BrasilA forum post advertises a 215MB archive from Cia de Trade Philip Morris in Brazil containing PST mailboxes, HR paystubs and credentials for roughly 965 staff. If genuine, it hands attackers working corporate email, payroll and identity data to pivot deeper into the Philip Morris environment and to run convincing HR-themed phishing. Relevant for Latin American defenders in the tobacco and industrial sector even though the post date is unconfirmed.Leak● 40
Filtración de base de datos de Altatech (Brasil)A database belonging to the Brazilian company altatech.com.br was posted for leak, exposing the firm's records. Although the post dates to March 2026 and is not fresh, it remains a Latin American corporate breach that could aid credential reuse and targeted phishing. Regional defenders should check for exposed corporate accounts.Leak● 72
Filtración masiva de datos del partido alemán AfDA 281.2 GB archive containing 102,985 files and roughly 400,000 email addresses attributed to the German political party AfD is being advertised. Leaks of political-party data enable phishing of staff and volunteers and can expose internal communications. Though outside Latin America, it is a large, sensitive political leak worth tracking.Leak● 58
Doxxing de miembros del Basij de la Guardia Revolucionaria iraníA DarkForums thread shares personal data of Basij members, the volunteer militia tied to Iran's Islamic Revolutionary Guard Corps. The records enable targeted phishing, intimidation and physical risk to identified individuals and their families. It also offers defenders indicators of how Iranian security-force personnel data is being traded in underground markets.Leak● 80
Filtración de datos del consejo regional francés Région SudA freshly posted thread leaks a database belonging to zou.maregionsud.fr, a subdomain of the French Provence-Alpes-Côte d'Azur regional council (Région Sud). Exposure of a regional government portal can reveal citizen/administrative records and internal credentials. French public-sector defenders should verify scope and rotate any exposed accounts.