BRIEFLeakhighP74
22,077-file leak from the Tamaulipas Ministry of Health
Secretaría de Salud de Tamaulipas
Detected15 November 2026 · 17:13 UTC
A 22,077-file document dump attributed to the Secretaría de Salud de Tamaulipas (Mexico) was published on DarkForums. Government health records can include patient, staff and procurement data useful for fraud, doxxing and follow-on intrusion. Defenders in Mexican public health should verify the scope and notify affected parties.
CategoryLeak
Severityhigh
Priority score74
Detected15 November 2026 · 17:13 UTC
LeakPriority 55
Colección de datos SCADA de EE. UU. publicada en BreachForumsA data collection labeled 'BhriguOne Scada US' was posted on BreachForums by user waykurap on 15 November 2026. If authentic, bundling SCADA/ICS-related data for US industrial targets raises risks for operational technology operators and vendors. Though outside the AR-LATAM focus, it is a fresh, time-sensitive critical-infrastructure leak worth tracking.LeakPriority 62
Filtración de declaraciones patrimoniales de funcionarios de MéxicoA database of 'declaraciones patrimoniales' (asset declarations) of Mexican public officials was leaked on DarkForums by user SoftVoid. Such records expose officials' income, properties and family assets, enabling targeting, extortion and corruption profiling. Mexican government bodies should confirm the source and warn affected officials.LeakPriority 48
Filtración de datos SCADA de EE. UU. atribuida a BhriguOneA BreachForums user using the handle 'waykurap' posted a 'BhriguOne Scada US' leak on 15 November 2026 in the Other Leaks section. It claims to expose SCADA/industrial control data tied to US organizations, though the exact victim and record volume are not confirmed in the preview. Industrial-control data is high-risk because it can reveal credentials, network topology and control-system access for follow-on intrusions.LeakPriority 60
Base de datos de la Universidad de Harvard a la venta en foro de filtracionesA DarkNetArmy forum user using the handle 'thisversace' posted a 'Havard University Database' entry on 15 November 2026, claiming to hold data belonging to Harvard University. The exact record count and fields are not confirmed in the preview, but a real academic institution of this profile makes it a credible high-value target. Leaked institutional databases often fuel credential stuffing and targeted phishing against staff and students.LeakPriority 75
La casa de cambio turca Bitay.com filtra 566.000 KYC y expone base de datosA forum post advertises data from Bitay.com, a Turkish crypto exchange, claiming 566,000 KYC records, 149,000 IBANs and live database access. Exposed identity and banking data of exchange users carries severe fraud and regulatory exposure, especially with the live-access claim. Turkish crypto users and Bitay customers should treat their credentials and identity data as compromised.LeakPriority 42
Base de datos de 72.000 clientes del restaurante polaco Piratto a la ventaA BreachForums seller is offering a database of about 72,000 rows from piratto.pl, a Polish restaurant business, containing email addresses and phone numbers. The data is consumer contact information from a food-service company, useful mainly for spam, smishing and credential-stuffing campaigns. Impact is limited but the sale is concrete and the dataset appears targeted at the Polish market.