BRIEFLeaklowP35
Combolist of 88,899 Mexican user credentials posted
Detected23 October 2026 · 23:15 UTC
A freshly posted combolist of 88,899 email:password entries targeting Mexican users has appeared on DarkForums. While it is a credential list rather than a single-org breach, its Mexico focus makes it relevant for regional credential-stuffing and account-takeover campaigns. Mexican banking, retail and government portals should watch for password-reuse attacks.
CategoryLeak
Severitylow
Priority score35
Detected23 October 2026 · 23:15 UTC
Leak● 64
Base de datos del DMV de Florida (2TB, 2026) a la ventaShinyHunters is advertising a 2TB dataset attributed to the 2026 State of Florida DMV, a government motor-vehicle authority. Such data typically includes driver records, licenses and PII of millions of residents, prime material for identity fraud and account takeover. Although it is a US government target rather than LATAM, a leak of this scale from a major gov entity is significant for defenders tracking the actor.Leak● 75
Filtración de bases de datos de universidades de Ecuador (PUCE-CASES)A freshly posted thread advertises a 'COMUNICADO Y PUCE-CASES' database tied to Ecuadorian universities. If authentic, it exposes student and staff personal data and academic records for a public higher-education sector in the region. Ecuadorian universities are government-linked institutions, making this a relevant LATAM leak for immediate verification and victim notification.Leak● 82
Filtración de base de datos de una universidad argentina (MEC)A forum user published a database belonging to an Argentine university, referred to as 'MEC', within minutes of this scan. University records typically contain student, staff and applicant PII plus internal credentials, enabling credential stuffing and targeted phishing. Public education entities in Argentina fall within government-adjacent critical services, so a fresh leak warrants immediate validation and notification.Leak● 48
Filtración de la base de datos de DisfracesCachivachesA database from the Spanish e-commerce site disfracescachivaches.com has been posted on BreachForums, likely containing customer account details and personal data from a Spain-based costume and party-supplies retailer. Spanish online shoppers are exposed to credential stuffing and phishing, and the dump can be redistributed. Retailers and consumers in Spain should watch for account-reuse attacks.Leak● 30
Base de datos del registro de BMW filtradaA forum user posted a 'BMW Registry' database on spear.cx in May 2026, likely containing vehicle or customer registration records tied to the automaker. The data is months old and outside our region, so it is not a fresh alert, but it may resurface in resale or credential-stuffing operations. Track only for downstream exposure affecting partners and suppliers.Leak● 48
Filtración completa de datos de Novo NordiskActor 'FulcrumSec' posted the complete release of all previously withheld Novo Nordisk data, potentially exposing internal corporate and research information from the global pharma giant. Although outside our region and roughly two months old, such leaks fuel phishing, account takeover and supply-chain attacks against healthcare and pharma partners. Treat it as a data-leak event for credential hygiene and monitoring.