BRIEFLeaklowP35
Private data of Mexico, USA and Canada offered for sale
Detected5 October 2026 · 10:55 UTC
A bundle advertised as private data from Canada, Mexico and the USA is being shared as a checked set of personal records. The Mexican portion is relevant for the region and could enable fraud or account takeover. The post is undated, unverified and its true scale is unclear, so treat it as low confidence.
CategoryLeak
Severitylow
Priority score35
Detected5 October 2026 · 10:55 UTC
Leak● 50
Filtración de base de datos de empleados y dispositivos de ColombiaA database titled 'Colombia_Employee_Device_Registration' was freshly posted to the DarkForums leak section, apparently containing employee and device registration records tied to Colombian organizations. The specific victim is not yet identified, so any Colombian entity with centralized employee/device onboarding should validate exposure. Being recent, it may precede credential-stuffing or phishing against the affected staff.Leak● 64
Base de datos de salud de Türkiye Sigorta a la ventaA seller is offering a 13-million-row database of Türkiye Sigorta health and treatment records, exposing sensitive medical data of Turkish policyholders. A leak of this scale enables identity fraud, insurance scams and targeted phishing. It concerns a real insurer, but lies outside AR-LATAM and the post is undated.Leak● 28
Filtración de comunicaciones internas de RyanairA leak of Ryanair's internal communications is being shared, dated November 2025 and thus almost a year old. It may expose internal email, operational or employee details. Because it is dated and outside the AR-LATAM region, it is not a fresh alert but is worth noting for context.Leak● 78
Base de datos de oficiales de inteligencia saudíes a la ventaA threat actor is offering a claimed database of Saudi intelligence officers on RaidForums/BreachForums, listing names and identifying details of government personnel. If genuine, this is a high-impact leak of sensitive state-intelligence data of interest to both criminal and state-sponsored actors. Although outside the AR-LATAM scope, it flags an active government-data leak worth tracking for actor and tooling overlaps.Leak● 45
Filtración de base de datos de la plataforma infantil israelí AngelsKidsA 208MB database from the Israeli children's platform AngelsKids.co.il, containing parent and child records, is circulating on a hacking forum. Exposure of minors' and parents' personal data creates serious privacy, identity-theft and extortion risk. Defenders in child-services or affiliated organisations should treat it as a confirmed sensitive leak.Leak● 50
Filtración de 50 GB de datos de la universidad vietnamita qnu.edu.vnA 50GB trove of leaked data from the Vietnamese university qnu.edu.vn has just been posted. It likely contains student, staff and internal records that enable phishing, credential abuse and fraud. Universities are high-value targets; monitor for reuse of the exposed accounts and notify any partner institutions.