BRIEFLeaklowP30
500K Argentine (.ar) credential combolist leaked
Detected15 November 2026 · 05:14 UTC
A 500,000-line combolist of Argentine (.ar) email credentials was posted on BreachForums by user exelo in February 2025, split into six parts. Although the post is old, it still exposes real .ar accounts useful for credential stuffing and phishing. Treat it as a stale but still usable dataset when triaging Argentine exposure.
CategoryLeak
Severitylow
Priority score30
Detected15 November 2026 · 05:14 UTC
LeakPriority 72
Venta de datos de 800.000 pasajeros de Azerbaijan AirlinesA seller on DarkForums is offering 800,000 passenger records from Azerbaijan Airlines (azal.az), reportedly including upcoming flight information. Airline passenger data is sensitive personal and travel information whose exposure enables fraud and targeted phishing. The inclusion of current flight details raises added operational and security concerns for the airline.LeakPriority 84
Base de datos del Hospital Italiano de Argentina a la ventaA database of roughly 1.13 million records attributed to Hospital Italiano in Argentina is being offered on BreachForums. As a major healthcare provider it holds patient, medical and administrative data whose exposure raises serious privacy and fraud risks. The leak could also support targeted phishing against staff and patients.LeakPriority 62
Base de datos de 26,5 millones de usuarios de Telegram a la ventaA database of 26.5 million Telegram users covering 2020–2024 was posted on DarkForums on November 15, 2026 by user Ghost_King. Even if partly scraped, a dataset this size enables large-scale phishing, account-takeover attempts and cross-referencing for credential stuffing. Telegram has a very large user base, including many in Latin America.LeakPriority 92
Filtración de 40 GB del Ministerio de Salud de ArgentinaA 40 GB dataset attributed to Argentina's Ministry of Health has been posted on BreachForums. Health-ministry data typically includes citizen records, staff details and internal systems, making it sensitive national critical infrastructure. A leak of this size enables identity fraud, targeted phishing and potential follow-on intrusion into government networks.LeakPriority 70
Filtración gratuita de base de datos de la red de salud Subred Norte de ColombiaOn DarkForums, a user named Synq1xxss is distributing free of charge a 173k-line dataset attributed to Subred Norte, a public health services network in Bogotá, Colombia. Health-sector records can expose patient and staff personal data, enabling phishing, identity fraud and downstream social-engineering attacks. It is a fresh release tied to a real Latin American critical-sector entity, so it warrants prompt review.
LeakPriority 89
Filtración de datos de licencias de conducir de la ANSV de ArgentinaA threat actor using the handle skyling published on BreachForums a database allegedly containing Argentine driver's license records attributed to ANSV, the national road safety agency. This kind of dataset typically holds names, DNI, license numbers and personal identifiers that enable identity theft, credential abuse and highly targeted phishing. The fresh posting on a national government body in Argentina makes it a priority for defenders and authorities.