BRIEFLeakhighP55
Dediserve: first publication batch of leaked data
Dediserve
Detected17 October 2026 · 23:26 UTC
A leak actor released a first publication batch of sample data attributed to Dediserve, an Irish cloud hosting and IaaS provider. If the samples are genuine, customer records, billing data and hosted-client credentials could be exposed, with downstream risk for every organisation running infrastructure on that provider. Defenders should check the samples for their own credentials and watch for follow-on extortion or access sales.
CategoryLeak
Severityhigh
Priority score55
Detected17 October 2026 · 23:26 UTC
Leak● 35
Base de datos del Ministerio de Salud Pública de Ecuador a la ventaA database attributed to Ecuador's Ministry of Public Health (2025) is being listed on a leak forum, implying exposure of national health data. Government health records are critical infrastructure with high PII value for identity fraud. The post dates to August 2025, so it is not fresh but is worth tracking for LATAM public-sector exposure.Leak● 42
Filtración de 170k pacientes del Hospital Clínica San Agustín (Ecuador)A dataset covering approximately 170,000 patients of Ecuador's Hospital Clínica San Agustín is being offered for sale/leak. Such records typically contain names, IDs and clinical details, creating fraud and privacy risk for patients. The post is from May 2026, so it is stale and not a fresh alert.Leak● 45
Filtración de 120k datos médicos de laboratoriomedicos.com (Ecuador)Roughly 120,000 medical records tied to Ecuadorian medical laboratory laboratoriomedicos.com are offered on a leak forum. The dataset likely includes patient PII and diagnostic data, sensitive under health-privacy rules. The post dates to July 2026, so it is not a fresh alert but remains relevant for tracking LATAM healthcare exposure.Leak● 95
Registro electoral CNE Ecuador: 13,5M votantes y acceso SSHA seller claims full SSH access to the CNE.GOB.EC electoral registry plus 13.5 million valid voter records for 2026. This is a national electoral authority, so exposure risks mass voter PII, potential data manipulation and integrity attacks ahead of elections. Defenders should urgently verify perimeter/SSH exposure and credential hygiene.Leak● 40
Filtración inicial de datos de PG Group (Pure Options)The same actor published a first publication batch of samples attributed to PG Group (Pure Options), a US cannabis retail operator. These staged drops typically escalate to a full database release including customer, employee and order data if the target ignores the demand. Impact is limited to a single commercial victim outside the region, but it signals an active extortion campaign worth tracking for tactics and infrastructure.Leak● 42
Filtración inicial de datos de Precision FacadesA leak actor published a first batch of samples attributed to Precision Facades, apparently a construction/facade contractor, as part of a staged extortion release. Named-victim sample drops usually precede a full data dump if the victim does not engage. The volume and sensitivity are unconfirmed, so treat it as an emerging leak to verify rather than a confirmed large breach.