BRIEFLeaklowP48
Internal archive breach at Bandung civil registry
disdukcapil.bandung.go.id
Detected13 October 2026 · 18:53 UTC
An actor claims to have breached the internal archive of the Bandung civil registry (disdukcapil.bandung.go.id), exposing citizen records held by a local government agency. Government identity databases enable large-scale fraud and are sensitive even outside our region. The post looks dated around late July, so it is not a fresh alert.
CategoryLeak
Severitylow
Priority score48
Detected13 October 2026 · 18:53 UTC
Leak● 30
Paquete de filtraciones de bases de datos de criptomonedas a la ventaA bundle of leaked cryptocurrency databases totaling around 21.2 million records is being sold. Posted in March 2026, it is stale and likely an aggregation, so it is not a fresh alert. It remains marginally useful for tracking credential and account exposure in the crypto sector.Leak● 50
Base de datos de 600 millones de registros de EE. UU. en ventaA collection of roughly 600 million US records containing names, SSNs, addresses and related people is being offered, an unusually large identity dataset. Although US-focused, it fuels identity theft, account takeover and fraud at scale. Defenders should treat the SSN and address exposure as high-risk for financial abuse.Leak● 42
Base de datos de 100.000 consumidores de Sudáfrica a la ventaA seller is offering a database containing information on roughly 100,000 consumers from South Africa. Bulk consumer PII of this scale fuels credential stuffing, phishing and identity fraud. The date is unknown, so verify authenticity before treating it as fresh.Leak● 34
Filtración de datos de solicitantes de la oficina de trabajo de Pekalongan (Indonesia)A freshly posted dump claims data from the Pekalongan Regency Manpower Office job-applicant database in Indonesia. It is a government dataset likely containing national IDs and PII, but it is outside the Argentina/LatAm scope and the contents are unverified. Track only as regional context unless linked to local actors.Leak● 58
Filtración de base de datos de Goldston Oil Corporation (EE. UU.)A user posted a database bundle attributed to US energy firm Goldston Oil Corporation on DarkForums only minutes before collection. The size and fields are unverified, but energy-sector dumps typically carry employee PII and internal contacts useful for phishing and fraud. Defenders in oil/gas should confirm exposure and watch for credential reuse.Leak● 46
Venta de datos de tres empresas contratistas de AramcoA seller offers data allegedly taken from three contracting companies working for Saudi Aramco. Supplier and contractor databases often contain employee PII, project details and credentials useful for follow-on intrusion. It highlights supply-chain risk around a high-value energy target, though outside the AR-LATAM region.