BRIEFLeaklowP85
Selling Brazil KYC records with photos on NulledBB
Brazilian KYC data
Detected4 July 2026 · 10:29 UTC
Reposts collapsed2
Sale of Brazilian KYC records with photos, could be used for identity fraud and may involve government systems.
CategoryLeak
Severitylow
Priority score85
Detected4 July 2026 · 10:29 UTC
Leak● 55
Filtración de base de datos del partido Serbia SNS (progress.rs)A DarkForums post claims progress.rs, the Serbian Progressive Party's botting platform, was exposed and its database dumped. The leak could reveal supporters, operators and infrastructure tied to a ruling party, with disinformation and hacktivist implications. Though outside Latin America, it is a real, named organisation leak worth tracking.Leak● 85
Filtración de 120,7 millones de registros de educación de São PauloA 2026 BreachForums listing offers a São Paulo state education database of 120.7 million records (~36.3 GB), among the largest education-sector leaks in Latin America. It likely exposes student, parent and staff personal data, fuelling identity theft and phishing. Brazilian public-sector defenders should verify scope and prepare notifications.Leak● 92
Filtración de datos de la petrolera estatal boliviana YPFBA fresh BreachForums post advertises a leak tied to YPFB, Bolivia's state oil and gas operator and a key piece of Latin American energy critical infrastructure. If genuine, the dump could expose internal credentials and data enabling lateral movement, fraud or disruption at a strategic asset. Regional defenders should prioritise verification and containment.Leak● 63
Venta de 11,4 millones de documentos de identidad de EspañaThreat actor 'The Negratas' is offering roughly 11.4 million Spanish national ID (DNI) documents for sale, posted around June 2026 on a Russian-language forum. The dataset enables large-scale identity theft, account-opening fraud and impersonation of Spanish residents. Although not fresh, its scale makes it a key reference for monitoring identity fraud across the Spanish-speaking world.Leak● 60
Filtración de datos de alumnos de escuela de Rosario (edu.ar)A user ('skyling') posted an alumni database for the Argentine school domain sagradorosario.edu.ar on BreachForums on 15 Oct 2026. It exposes student and alumni personal data useful for phishing and credential reuse against a Latin American education institution. The leak is fresh, so verify the exposure and notify affected students and families.Leak● 38
Filtración de 214.064 registros de usuarios de fitness1.bgA dataset of 214,064 user records from the Bulgarian fitness chain fitness1.bg, including names, emails, phones and addresses, has been leaked. The PII supports phishing, credential stuffing and physical targeting of members. It is outside the AR-LATAM region and moderate in scale, so it is a secondary item for regional defenders.