BRIEFLeakhighP68
CECyTE Zacatecas database dump published in Mexico
CECyTE Zacatecas
Detected5 November 2026 · 21:43 UTC
Reposts collapsed2
A DarkForums user (Lvrimer) posted a database dump belonging to CECyTE Zacatecas, a public technical-education institution in Mexico. The dump likely contains student, staff and academic records including personal identifiers and contact data. Because it is a public education body, the exposure enables targeted phishing against students and employees and should be validated quickly.
CategoryLeak
Severityhigh
Priority score68
Detected5 November 2026 · 21:43 UTC
LeakPriority 38
Filtración de la base de datos de pasaportes de IsraelA SpyHackerz thread by user spainfederal offers what is described as a full Israeli passport and identity database, published in July 2026 and still circulating. If authentic, it would expose passport numbers, national IDs and personal details useful for identity theft and border-fraud schemes. The post is roughly four months old, so it is a background reference rather than a fresh alert.LeakPriority 46
Base de datos de 125 GB con SSN de EE. UU. publicadaDarkForums user Halvvutir posted a 125 GB dataset advertised as a US Social Security Number database, the kind of bulk identity material used for synthetic identity fraud, account takeover and loan fraud. It is not tied to a single named organisation, so attribution is impossible, but its scale makes it relevant for fraud and KYC teams. Latin American firms serving US customers or handling US identifiers should account for downstream abuse.LeakPriority 54
Filtración de 689.000 registros de PajEmploi (urssaf.fr)DarkForums user Halvvutir published a database reportedly containing 689,000 records tied to PajEmploi, the French URSSAF portal used for declaring and paying domestic employees. The data likely includes employers, employees, social-security identifiers and salary information, a rich target set for tax-themed phishing and fraud. French public-sector payroll exposure also matters to European organisations handling similar data.LeakPriority 55
Datos de vigilancia del aeropuerto de Shanghái filtradosA DarkForums post by Marrrazil claims to release data linked to Shanghai Suishenma, related to airport surveillance systems. Surveillance and access-control data from an airport is critical-infrastructure material that can reveal physical security weaknesses, camera locations and personnel information. Aviation and transport operators in other regions should treat it as a real-world exposure risk indicator.LeakPriority 58
Base de datos de la farmacéutica Aurobindo Pharma a la ventaDarkForums user Halvvutir published a thread offering a database belonging to Aurobindo Pharma, a major Indian generic-drugs manufacturer that supplies medicines globally, including to Latin American markets. Pharma data leaks can expose supplier, employee and commercial records that enable business email compromise and supply-chain fraud. The size and contents are unverified, so validation is required before relying on it.LeakPriority 35
Filtración alegada de bases .org.br y .eb.mil.br (OpCalibre22)A BreachForums thread claims a hack of Brazilian .org.br databases and the .eb.mil.br military domain under the tag #OpCalibre22. The 'OpCalibre22' label points to a 2022 operation, so this is likely recycled older material rather than a fresh breach, reducing its alert value. It still matters as a reference because .eb.mil.br is Brazilian Army infrastructure; defenders should treat the data as potentially valid for credential-stuffing context.