BRIEFLeakhighP60
10 GB data leak of UAE's Hosn Al Sharjah government body
Hosn Al Sharjah
Detected11 November 2026 · 07:43 UTC
Threat actor ROOT SYSTEM published a 10 GB data leak from Hosn Al Sharjah, a government entity in the United Arab Emirates, claiming root-level system access. The exact record count is undisclosed. Although outside Latin America, a fresh government compromise of this size is relevant for regional defenders tracking the same actor and its tooling.
CategoryLeak
Severityhigh
Priority score60
Detected11 November 2026 · 07:43 UTC
LeakPriority 56
Filtración del sistema de gestión sanitaria qlog.co (Israel)Threat actor ROOT SYSTEM posted a leak from qlog.co, an Israeli healthcare management system, roughly an hour before collection. Healthcare platforms hold sensitive patient and provider records, making this a high-value exposure for downstream fraud. It is outside Latin America but relevant because the same actor is publishing multiple fresh system compromises.LeakPriority 62
Filtración de datos de clientes de Tarte Cosmetics y Triple WhaleA BreachForums (bf.st) listing advertises a collection affecting tartecosmetics.com and analytics firm Triple Whale, claiming 218,783 accounts, 189,152 password hashes and 12.6 million customer records. The data mixes e-commerce and cosmetics customer accounts with credentials, enabling credential-stuffing and targeted phishing against the brand and its buyers. Defenders should treat exposed credentials as compromised.LeakPriority 58
Base de datos de 1M de usuarios de Gulf Air a la ventaA seller using the handle databreach000 is offering roughly 1 million Gulf Air (gulfair.com) user records on the DarkForums marketplace. Gulf Air is Bahrain's national carrier, so the data likely includes customer identities and contact details that enable credential-stuffing and targeted phishing against travellers and airline loyalty users. Large airline datasets also carry regulatory and fraud-handling implications for the company and its partners.LeakPriority 30
Combolist masiva de 32 millones de líneas vinculada a StarLinkCloudsA user on NulledBB released a roughly 32.2 million-line URL:login:password corpus under the Secretline.top and StarLinkClouds labels. It is a generic stealer-log aggregation rather than a single-organization breach, but the volume makes credential-stuffing and account-takeover attempts against corporate and consumer services more likely. No named victim is identifiable from the post.LeakPriority 74
Base de datos del Ministerio de Electricidad de Kuwait publicadaA database belonging to Kuwait's Ministry of Electricity and Water (mew.gov-kw), a national critical-infrastructure body, was posted for distribution on a BreachForums marketplace leak section. The exposure of a government energy ministry directly affects infrastructure operators and could enable follow-on access or targeted phishing against staff. It is outside the AR-LATAM scope but is a genuine government critical-infrastructure data exposure worth tracking.LeakPriority 48
Volcado de base de datos completa 'RF' de 405 GB distribuido como torrentA 405 GB 'RF FullDatabase' archive is being shared as a torrent on Cracked.st under the Other Leaks section, which points to a very large dataset dump rather than a small combolist. The listing does not name the victim organization, limiting immediate attribution, but the scale suggests a substantial breach worth inspecting. Defenders should sample the archive to identify affected accounts and domains.