BRIEFLeaklowP52
205,000 Argentine credentials combolist offered for sale
Detected17 October 2026 · 22:26 UTC
A 205,000-line Argentina-focused credential combolist was posted minutes ago on a leak forum, likely built from infostealer logs and prior breaches. Rather than one victim database, it lists individual email/password pairs, so exposure is dispersed across consumers and corporate accounts that reuse passwords. Argentine defenders should search SSO and mail gateways for matches and force resets where reuse exists.
CategoryLeak
Severitylow
Priority score52
Detected17 October 2026 · 22:26 UTC
Leak● 40
Filtración inicial de datos de PG Group (Pure Options)The same actor published a first publication batch of samples attributed to PG Group (Pure Options), a US cannabis retail operator. These staged drops typically escalate to a full database release including customer, employee and order data if the target ignores the demand. Impact is limited to a single commercial victim outside the region, but it signals an active extortion campaign worth tracking for tactics and infrastructure.Leak● 42
Filtración inicial de datos de Precision FacadesA leak actor published a first batch of samples attributed to Precision Facades, apparently a construction/facade contractor, as part of a staged extortion release. Named-victim sample drops usually precede a full data dump if the victim does not engage. The volume and sensitivity are unconfirmed, so treat it as an emerging leak to verify rather than a confirmed large breach.Leak● 55
Dediserve: publicación inicial de datos filtradosA leak actor released a first publication batch of sample data attributed to Dediserve, an Irish cloud hosting and IaaS provider. If the samples are genuine, customer records, billing data and hosted-client credentials could be exposed, with downstream risk for every organisation running infrastructure on that provider. Defenders should check the samples for their own credentials and watch for follow-on extortion or access sales.Leak● 44
Filtración de 1,67 millones de credenciales de EspañaA 1.67 million-line combolist tagged to Spain (Europa ES) was published on 16 October, aggregating email/password pairs likely from stealer logs and breaches. It is not tied to a single named organization, so the risk is credential reuse across Spanish businesses and public-sector accounts. Monitoring for valid corporate logins and enforcing MFA are the practical defenses.Leak● 50
Datos de más de 750 empresas turcas a la venta o filtradosA seller is offering or leaking data attributed to more than 750 top Turkish companies on a leak forum, posted around 17 September 2026. The scope spans hundreds of organizations rather than a single victim, suggesting aggregated corporate contact and credential data useful for phishing and business email compromise. Though outside Latin America, it can seed cross-border fraud targeting regional partners.Leak● 46
Filtración de la base de datos de una universidad nacional francesaA free database leak of a French national university has been posted on PwsForums and is available for download to anyone. University breaches expose student, staff and applicant PII such as names, emails and identifiers, which directly fuels phishing and account-takeover campaigns. Although the victim is outside Latin America, it is a real institutional leak worth tracking for credential reuse against related accounts.