BRIEFGov / MilitaryhighP72
Andalusia regional government LDAP credentials for sale
Junta de Andalucía
Detected23 October 2026 · 13:01 UTC
Reposts collapsed3
An actor is offering a set of roughly 3,000 LDAP credentials attributed to the Junta de Andalucía, the regional government of Andalusia in Spain. Directory credentials are high-value because they typically disclose usernames, internal domain structure and authentication context usable for password spraying or lateral movement into government systems. Defenders in Spanish public administration should force credential resets and review directory exposure.
CategoryGov / Military
Severityhigh
Priority score72
Detected23 October 2026 · 13:01 UTC
Gov / Military● 42
Filtración de datos del dominio gubernamental cga.ct.gov con nombres y correosA poster claims to have leaked a database tied to the cga.ct.gov domain, containing personal names and Gmail addresses associated with a U.S. state government body. The scale appears limited to identity and contact fields rather than credentials, but government-affiliated contact lists are valuable for phishing and impersonation. Public-sector entities across the region should monitor for similar low-volume, high-credibility dumps of official domains.Gov / Military● 85
Filtración de datos y documentos de la Fuerza Aérea de BrasilA leak-section post claims to distribute data and documents belonging to the Brazilian Air Force, a military branch that runs air-defence, radar and communications infrastructure. No record count or date is given, but exposure of military documents enables targeted phishing, credential abuse and intelligence collection against defence personnel and contractors. Regional defence and government defenders should hunt for reuse of the exposed material in credential-stuffing and spear-phishing.Gov / Military● 92
Filtración completa del webmail Gov.br del Gobierno de BrasilA threat actor is advertising a 'complete leak' of Brazil's government Gov.br webmail platform, posted on 19-10-2026. If genuine, exposed government mail credentials could enable account takeover, lateral movement and phishing against federal employees across ministries. Brazil is a priority LATAM government target, so this warrants immediate validation and credential-reset guidance.Gov / Military● 38
Filtración de la base de datos de GPO.gov, imprenta del Gobierno de EE.UU.A user shares what is presented as a database from GPO.gov, the US Government Publishing Office, on a leak forum. The value lies in federal staff accounts and contact data that could support spear-phishing against public agencies or supplier impersonation. The post is from February 2026, so it is a stale re-post rather than a fresh alert and should be treated as background context.Gov / Military● 88
Venta de +1.000 correos gubernamentales de VenezuelaA seller is offering over 1,000 Venezuelan government email accounts (govmails), posted today. This exposes official credentials of ministries and public entities, enabling targeted phishing, lateral movement and access to state communications. Defenders should monitor login attempts, force credential rotation and enforce MFA across .gob accounts.Gov / Military● 68
Código fuente del sitio del PSOE de España filtradoThe source code of the website of Spain's ruling PSOE party was published on a leak forum. Leaked source code can reveal vulnerabilities, hardcoded secrets and logic flaws that enable further attacks on the party's infrastructure. Relevant to Spanish government-adjacent entities; review for exposed keys and exploitable endpoints.