BRIEFLeaklowP50
1M Mexican email/password credentials leaked
Detected16 October 2026 · 20:56 UTC
A one-million-line email:password combo attributed to Mexico is circulating, posted hours ago. Unlike small combolists, the size makes it usable for credential-stuffing against Mexican organisations and citizens at scale. It is lower impact than a confirmed database breach but still relevant for regional defenders due to its volume.
CategoryLeak
Severitylow
Priority score50
Detected16 October 2026 · 20:56 UTC
Leak● 32
Base de datos de Cultura.com (2,1M, 2024) filtradaA 2.1 million-record database attributed to Cultura.com and dated 2024 was posted to DarkForums. Although the data is roughly two years old, records of this size still fuel credential stuffing and phishing against reused accounts. Organisations should check for reuse of these credentials even though the breach is not fresh.Leak● 60
Base de datos de la francesa Boulanger (132K) a la ventaA 132,000-record customer database attributed to French electronics retailer Boulanger was posted on 16 Oct 2026. Customer PII at this scale enables targeted phishing and account takeover against the retailer's clientele. French retail and fraud teams should confirm scope and alert affected customers.Leak● 72
Filtración de datos de 67.000 empleados de Cardinal HealthA seller is offering a 67,000+ record 'Azure employee dump' of US healthcare giant Cardinal Health, including full names, emails, titles, phones and addresses. The scale and corporate PII make it highly valuable for BEC, vishing and credential attacks against a major health-sector target. Directory exposure of this kind is often a precursor to targeted intrusion.Leak● 70
Base de datos de SFR Stargate publicada en BreachForumsA database labelled 'SFR Stargate' was posted to BreachForums on 16 Oct 2026. SFR is a major French telecom operator and part of critical national infrastructure, so any subscriber or internal data exposure risks fraud, SIM abuse and follow-on intrusion. Telecom defenders should verify the dump's authenticity and watch for credential reuse across their estate.
Leak● 87
Filtración de base de datos de la provincia de Neuquén (700K registros)A database of roughly 700,000 records attributed to Argentina's Neuquén province is being offered/leaked on a darkweb forum just minutes ago. Neuquén is a strategic jurisdiction due to energy (Vaca Muerta) and critical infrastructure, so exposure could affect citizens, public employees and provincial services. The volume and freshness make this a high-priority alert for regional defenders.Leak● 22
Filtración de 1,9 millones de registros del portal fiscal francés reduction-impots.frA 1.9M-record database tied to the French tax-reduction portal reduction-impots.fr (dated 2024) has resurfaced on leak forums. It relates to a government service, but the data is from 2024 and concerns France, so it is not a fresh AR-LATAM alert. Useful mainly as historical context for victim notification and identity-theft monitoring.