BRIEFLeakhighP46
Brazilian exchange broker VIPS site compromised
VIPS Corretora de Cambio SA
Detected30 September 2026 · 19:31 UTC
A separate Cracked.st thread repeats claims that VIPS Corretora de Cambio SA, a Brazilian foreign-exchange firm, has a compromised website. This points to a possible financial-sector breach in Latin America exposing customer or transaction data. Detail is thin, so defenders should treat it as an unverified lead to investigate.
CategoryLeak
Severityhigh
Priority score46
Detected30 September 2026 · 19:31 UTC
Leak● 52
Presunta filtración de base de datos de CarMax IncA forum thread lists CarMax Inc inside a leaked-databases section, suggesting a sale or leak of company data. CarMax is a large US used-vehicle retailer, so customer, employee or financial records would be valuable for fraud and phishing. Analysts should watch for samples, verify scope and warn the affected organization.Leak● 42
Filtración de base de datos de la telefónica SFR con 5M registrosA thread on xReactor offers a 5M-record database attributed to French telecom operator SFR. Telecom data includes subscriber PII and service details, high-value for SIM-swap and social-engineering attacks. Whether fresh or reposted, it warrants tracking given the critical-infrastructure nature of the target.Leak● 44
Filtración de 566K registros de clientes de Payback.deA 566K-record dataset linked to the German loyalty program Payback.de is offered as new private data for 2026. It likely contains customer identities and contact details usable for phishing and account takeover. Relevant for defenders tracking credential exposure at a major consumer platform.Leak● 50
Compromiso del sitio de la corredora brasileña VIPSA user on Cracked.st is sharing information about a compromised site belonging to VIPS Corretora de Cambio SA, a Brazilian foreign-exchange firm. If confirmed, this is a financial-sector compromise in Latin America potentially exposing client or transaction data. The post lacks detail, so scope must be verified.Leak● 63
Base de datos de Neiman Marcus filtradaA database attributed to US retailer Neiman Marcus was posted to a leak forum within the last minute, likely a repost or fresh dump. Databases from large retailers fuel credential stuffing, phishing and payment fraud at scale. It is worth tracking for size and authenticity, though it falls outside the Latin America region.Leak● 42
Filtración de 235.000 registros de un centro educativo de Hong KongTurkHackTeam's ANKA TEAM published a 235,000-record database allegedly belonging to the Hong Kong educational institution mckln.edu.hk. Student and staff data of this scale fuels credential stuffing and targeted phishing. It is not a LATAM target, but it is a real organizational breach worth tracking.