BRIEFLeakhighP78
120 GB database leak of Chilean health provider RedClinica
RedClinica Chile
Detected20 September 2026 · 21:37 UTC
A 120 GB database belonging to RedClinica, a Chilean clinical/health services provider, was posted for download on a cybercrime forum by user Synq1xxs less than a minute before discovery. The dump likely contains patient records, appointments and personal health data protected under Chilean law. Health-sector defenders in Chile should treat this as a confirmed breach and monitor for downstream identity theft, fraud and targeted phishing.
CategoryLeak
Severityhigh
Priority score78
Detected20 September 2026 · 21:37 UTC
Leak● 58
Venta de datos filtrados del exchange OMPFinex en DarkForumsThe seller 'Zexxy' listed an 'OMPFinex Data Breach' in the DarkForums Place Leaks Market on 5 November 2026, offering allegedly stolen data from the OMPFinex cryptocurrency exchange. Crypto exchanges hold KYC records, identity documents, balances and contact data, so a genuine breach would expose customers to targeted phishing, account takeover and extortion. The record count and sample are not public in the snippet, so the claim still needs verification before use.Leak● 55
Información del CBP y DHS de EE.UU. publicada en DarkForumsA user ('nesthedev') posted a thread titled 'cbp dhs information' in the DarkForums Leaks/Databases section on 5 November 2026, referencing U.S. Customs and Border Protection and the Department of Homeland Security. The body is truncated, so the exact scale and whether it is internal documents, personnel data or credentials is unconfirmed, but any release of CBP/DHS material is high-value for adversaries doing targeting or social engineering against U.S. border and law-enforcement staff. Defenders should treat it as a potential law-enforcement data exposure until the sample is reviewed.Leak● 42
Filtración de 5,9 millones de registros del medio neerlandés FTMANKA TEAM posted a 5.9 million record database leak attributed to ftm.nl, the Dutch investigative outlet Follow the Money, on TurkHackTeam. Journalist and subscriber data can expose sources and enable targeted phishing, doxing and harassment. Media organizations should assess whether their accounts and contacts are affected.Leak● 55
Base de datos del sistema de pagos PaySysLabs de Pakistán, a la ventaA seller on DarkForums is offering a CRM and database allegedly from PaySysLabs, a Pakistani instant payment system. Payment-system data can include merchant, transaction and user details, enabling fraud, account takeover and downstream attacks on connected financial institutions. Financial-sector defenders in Pakistan should verify scope and monitor for leaked data.Leak● 42
Filtración de 5,9 millones de registros del medio neerlandés Follow the MoneyANKA TEAM is advertising a 5.9 million record database leak from ftm.nl, the Dutch investigative journalism outlet Follow the Money, on TurkHackTeam. The claimed volume far exceeds the outlet's subscriber base, suggesting aggregated scraped or third-party data, but the publication name still raises targeting concerns for journalists and their sources. It has no direct Argentine or Latin American government impact.Leak● 63
Filtración de 7,7 millones de registros de la operadora Cingular.brA 7.7 million record data leak attributed to Cingular.br, a Brazilian telecom operator, was posted on TurkHackTeam. The dump allegedly contains customer and account data that could fuel SIM-swap, phishing and account-takeover campaigns against Brazilian users. Telecom subscriber leaks also expose identifiers useful for fraud and downstream attacks on linked services.