BRIEFLeaklowP50
Brazil CPF database leak
Brazilian CPF Database
Detected1 July 2026 · 20:55 UTC
Leak of Brazilian CPF numbers (national ID), significant for identity fraud in Latin America, but posted 9 months ago.
CategoryLeak
Severitylow
Priority score50
Detected1 July 2026 · 20:55 UTC
Leak● 50
Actor SCARLETTGROUP afirma brecha en Genesys CloudThe actor SCARLETTGROUP claims to have breached Genesys Cloud Services, a global cloud contact-center provider used by banks, telcos and government agencies. A supplier compromise could cascade to many downstream client organizations via the supply chain. It is worth assessing third-party exposure, though scale and date remain unverified.Leak● 85
Banco Pichincha Perú comprometido mediante SQLiThe actor 'Returnero' claims a SQL injection compromise of BANCO PICHINCHA.PE, offering bank data plus access to additional sites. Banco Pichincha is a major financial institution in Peru and the Andean region, so a confirmed breach would mean customer-data exposure, fraud and lateral-movement risk. This is banking and critical-infrastructure relevant for Latin America.Leak● 44
Conjunto de logs de robo de 966MB publicado el 15-10-2026A 966MB log dump dated 15-10-2026 was posted, likely containing infostealer credentials and session data. Stealer logs frequently include corporate VPN, webmail and SaaS tokens that seed downstream intrusions. Though no named victim is given, its freshness and size make it worth monitoring for regional corporate credentials.Leak● 66
Base de datos del banco brasileño Sicoob (10GB) a la ventaA 10GB database attributed to Sicoob, a major Brazilian cooperative banking group, is being traded on a leak forum. Financial data at this scale exposes account holders and enables fraud and targeted social engineering against customers. It matters for LATAM banking defenders; recency is unclear as the thread appears long-running.Leak● 38
Filtración de 966 MB de registros de documentos con fecha 15/10/2026A 966 MB archive labelled 'Document LOGS' dated 15 October 2026 is being shared on DarkForums, indicating a fresh bulk leak of logs or documents. The affected target is not visible in the accessible text, so the real impact and scale are unclear, but the size and recency suggest a substantial data set that may contain credentials or sensitive documents. Analysts should retrieve the full thread to identify the impacted organizations and any regional relevance.Leak● 48
Filtración de 12,4 GB de datos de GlobalAdmissions.com y China-Admissions.comA 12.4 GB dataset allegedly exfiltrated from GlobalAdmissions.com and China-Admissions.com is being shared, covering international student applicants and admissions data. Although China-focused, the data includes global applicants and can fuel targeted fraud and social engineering. Organisations working with these platforms should assess exposure and watch for re-use.