BRIEFLeaklowP47
124,000-entry Argentine credential combolist posted on forum
Detected13 October 2026 · 03:53 UTC
A forum actor posted a freshly uploaded combolist of roughly 124,000 Argentine email/URL and password pairs for credential-stuffing. It is not tied to a single named organization, but it directly enables account-takeover and fraud against Argentine services and users. Defenders should check password reuse and enforce MFA on any exposed accounts in the set.
CategoryLeak
Severitylow
Priority score47
Detected13 October 2026 · 03:53 UTC
Leak● 40
Filtración de datos financieros de Polish Falcons of AmericaA leak of financial records belonging to the Polish Falcons of America (PFA), a US fraternal benefit society, is being shared on the Niflheim forum. PFA administers insurance and annuity products for its members, so exposed financial data could fuel fraud and account takeover against policyholders. It is outside the AR-LATAM/critical-infrastructure focus, but it is a genuine named-organization leak worth tracking.Leak● 14
Combolist masivo de credenciales argentinas publicado (junio 2025)A high-volume combolist of Argentine credentials (email/username and password) was shared on a leak forum, but the thread dates to June 2025 and is stale rather than a fresh alert. It remains useful only as historical exposure for checking long-lived password reuse. It should not be treated as a time-sensitive notification.Leak● 40
Filtración de datos financieros de Polish Falcons of AmericaA financial data leak attributed to Polish Falcons of America (PFA) has been posted on DarkNetArmy. The material appears to relate to the fraternal organization's accounts or member financial records. Exposure of financial data elevates fraud and regulatory risk for the organization.Leak● 48
Filtración de base de datos de la Universidad de Camarines NorteA database belonging to the University of Camarines Norte in the Philippines is being offered on DarkForums. University records typically contain student and staff PII such as names, IDs and contact data, enabling targeted phishing and identity fraud. Affected institutions should verify the breach and notify users.Leak● 55
Filtración de 25 millones de cuentas de VK.comA 25-million-record dataset attributed to VK.com, a major Russian social network, is being circulated on DarkForums. If genuine and current, it enables large-scale credential stuffing and account takeover against VK users and any service where passwords were reused. Defenders should force password resets and watch for credential-reuse attacks.Leak● 30
Combolist de 430.000 credenciales de Brasil (marzo 2026)A 430K+ Brazil-focused email:password combolist dated March 2026 is circulating. Because it predates today by months it is not a fresh alert, but it can still fuel credential-stuffing against Brazilian services and users. Low urgency, mostly historic exposure.