BRIEFLeakhighP54
200,000-record leak from Mexico's Durango state
Gobierno de Durango (México)
Detected4 November 2026 · 21:24 UTC
DarkForums user DN07 listed a 200K-record database attributed to the Durango state government on 15 October 2026, following similar postings for other Mexican states. The thread is now closed as removed content, so the sample can no longer be verified publicly. State-level citizen data is frequently reused for extortion, phishing and credential stuffing against government portals.
CategoryLeak
Severityhigh
Priority score54
Detected4 November 2026 · 21:24 UTC
Leak● 28
Base de datos de Canva reeditada en foro de filtracionesA thread offering a Canva.com database was posted on DarkForums on 4 November 2026 by user Soldeitoz. Canva suffered a well-known large breach years ago, so this is likely a re-post of stale data rather than a new incident. It is worth noting for re-use in credential-stuffing but is not a fresh compromise.Leak● 52
Filtración de la base de datos de ZenMobile FranciaA database belonging to French telecom ZenMobile was posted on DarkForums on 4 November 2026 by user Soldeitoz. Telecom customer data often includes subscriber identities, contact details and usage information valuable to fraud and SIM-swap actors. Telecom breaches also carry regulatory and customer-trust impact.Leak● 56
Filtración de datos de la Asociación Médica TurcaA leak concerning the Turkish Medical Association (TTB) was posted on DarkForums on 4 November 2026 by user hasoo. As a national medical professional body, exposed data may include member, physician or contact information. Health-sector leaks enable targeted phishing and raise privacy and regulatory concerns.Leak● 68
Filtración completa de BMW publicada en 13 partesA complete BMW corporate data leak released in 13 parts was posted on DarkForums on 4 November 2026 by user Soldeitoz, indicating a large multi-part database exposure. The affected party is a major German automotive manufacturer, so the data may include internal, customer or supplier records. Automotive and supply-chain defenders should assess exposure as the parts are published.Leak● 42
Filtración de 200.000 registros del portal de GuanajuatoA DarkForums listing advertises a 200K-record database from guanajuato.gob.mx, the Mexican state government portal. The thread is closed as removed content and carries no visible date, so freshness cannot be established and the data may already be circulating for some time. It remains relevant as part of a cluster of Mexican state-portal leaks alongside Durango and Sonora.Leak● 45
Base de datos completa del portal de Sonora expuesta en DarkForumsA DarkForums thread by Frouzenx advertises a full database from sonora.gob.mx, the Mexican state government portal, without a verifiable record count. The listing is closed as removed content and the exact posting date is unclear, making freshness uncertain. It still indicates continued targeting of Mexican state portals and should be correlated with the Durango and Guanajuato postings.