BRIEFLeakhighP54
QRIS Indonesia payment data leak: 1.5 million transactions
QRIS (sistema de pagos QR de Indonesia)
Detected19 October 2026 · 13:39 UTC
A BreachForums thread is distributing what it claims is a database of about 1.5 million QRIS transactions, Indonesia's national QR payment standard used by banks and merchants nationwide. Though outside Latin America, it is a direct example of national payment-rail data being traded openly, which is useful context for defenders of similar systems such as Pix or Mercado Pago. Scale and freshness of the dataset are unverified and should be treated as unconfirmed.
CategoryLeak
Severityhigh
Priority score54
Detected19 October 2026 · 13:39 UTC
Leak● 47
Filtración de base de datos de la autoridad SHENA de BrunéiA database attributed to Brunei's Safety, Health and Environment National Authority (SHENA) has been posted for download on a breach forum. As a national regulatory body, it likely handles internal staff, inspection and compliance records whose exposure raises government-targeting and phishing risk. Though outside the AR-LATAM focus, government database leaks are worth tracking due to possible downstream supply-chain or credential reuse.Leak● 60
Filtración de la campaña de Philip Morris en Brasil (Cia de Trade)A 215MB archive tied to a Philip Morris campaign run through the Brazilian firm Cia de Trade has been leaked, including PST mail archives, HR pay stubs and roughly 965 staff credentials. The exposure of internal email and HR records enables targeted phishing, business email compromise and credential reuse against the organization and its partners. Brazilian and regional defenders should force credential resets and review mail exposure.Leak● 64
Filtración de datos de RRHH de Philip Morris BrasilA forum post advertises a 215MB archive from Cia de Trade Philip Morris in Brazil containing PST mailboxes, HR paystubs and credentials for roughly 965 staff. If genuine, it hands attackers working corporate email, payroll and identity data to pivot deeper into the Philip Morris environment and to run convincing HR-themed phishing. Relevant for Latin American defenders in the tobacco and industrial sector even though the post date is unconfirmed.Leak● 40
Filtración de base de datos de Altatech (Brasil)A database belonging to the Brazilian company altatech.com.br was posted for leak, exposing the firm's records. Although the post dates to March 2026 and is not fresh, it remains a Latin American corporate breach that could aid credential reuse and targeted phishing. Regional defenders should check for exposed corporate accounts.Leak● 45
Base de datos raspada de Instagram con 17 millones de registrosA 17-million-record dataset scraped from Instagram's API in 2026 is being shared. While based on public profile data, at this scale it fuels account enumeration, targeting and credential-stuffing against users and brands. Social-media and brand-protection teams should be aware of the dataset's circulation.Leak● 72
Filtración masiva de datos del partido alemán AfDA 281.2 GB archive containing 102,985 files and roughly 400,000 email addresses attributed to the German political party AfD is being advertised. Leaks of political-party data enable phishing of staff and volunteers and can expose internal communications. Though outside Latin America, it is a large, sensitive political leak worth tracking.