BRIEFLeakhighP48
Full Oriflame leak including country verification documents
Oriflame
Detected3 October 2026 · 12:03 UTC
A full Oriflame database leak is being circulated, including customer verification (KYC) documents from every country where the company operates. Such identity documents enable fraud, account takeover and impersonation at scale. Oriflame customers, including those in Latin America, may be in scope and should be flagged for identity-monitoring.
CategoryLeak
Severityhigh
Priority score48
Detected3 October 2026 · 12:03 UTC
Leak● 30
Filtración masiva de Diia (Ucrania): 20 M ciudadanosA thread re-shares a claimed 2025 mega leak of Ukraine's Diia state digital-identity platform affecting 20M+ citizens. The data involves national identity documents and personal records, making it highly sensitive, but the source is dated 2025 and is being recirculated rather than freshly breached. It is catalogued for context, not as a time-sensitive alert.Leak● 42
Base de datos del FCI Bank filtrada en foroA fresh DarkForums post advertises a leaked FCI Bank database, implying exposure of financial customer records. Banking datasets enable fraud, identity theft and credential attacks against the institution and its clients. The affected region and exact entity are unclear, so it is flagged for verification but still worth surfacing as a named financial leak.Leak● 54
Filtración de datos internos de Uber (uberhub, 20 M)A thread advertises data tied to uberhub.uberinternal.com with a claimed scale of over 20 million records. Internal corporate infrastructure data of this size can expose employee accounts, MDM and internal tooling, aiding lateral movement and follow-on intrusions. It merits attention for access and leak monitoring even though Uber is not a LATAM entity.Leak● 56
Filtración de datos de Air Miles España (travelclub.es)A database belonging to Air Miles España (travelclub.es), a Spanish loyalty and travel programme, is offered in a DarkForums leak thread. Such datasets typically contain personal data and account credentials of many members, enabling fraud, phishing and loyalty-point abuse. It matters for Spanish-speaking victims and for tracking a named corporate leak.Leak● 60
Filtración completa de la operadora Odido (Países Bajos)A post claims a full leak of Odido, a major Dutch telecom operator, a critical-infrastructure sector where data exposure is especially damaging. Telecom breaches expose subscriber data, SIM and account controls, enabling fraud and SIM-swap attacks. Even outside Latin America it is directly relevant to access/leak monitoring and worth surfacing for peer telecom defenders.Leak● 72
Filtración de base de datos de la brasileña PrivaliaA large set of roughly 1.8 million Privalia Brasil credentials (URL and password) is being shared on DarkForums, indicating a substantial retail database leak in Latin America. Privalia is a major fashion e-commerce brand in Brazil, so the exposed logins enable account takeover, fraud and reuse against other services. Regional defenders should force resets and watch for credential-stuffing and phishing leveraging this dataset.