5.3 GB data breach at Ukrainian lender CashPoint.ua

CashPoint.ua

Detected20 September 2026 · 18:37 UTC

Why it matters

A 5.3 GB dataset from CashPoint.ua, a Ukrainian microfinance lender, has been leaked and is being distributed freely. It likely contains customer PII and loan records enabling identity theft and targeted phishing against borrowers. Financial-sector defenders should monitor the exposure and warn impacted customers.

MetadataRECORD

CategoryLeak

Severityhigh

Priority score45

Detected20 September 2026 · 18:37 UTC

Related items6

Leak● 50

Filtración de 200.000 clientes de Getir y BiTaksiA DarkForums user ('Coltorix') posted a claimed new 200K customer dump from Getir and BiTaksi, Turkish delivery and ride-hailing apps. Such dumps expose phone numbers, addresses and order history usable for phishing and account takeover. It is a moderate-scale regional consumer breach rather than a critical-infrastructure event.

27m

Leak● 52

Filtración de 10 GB de datos de NestléA DarkForums post ('Kreztazal') advertises roughly 10GB of Nestlé corporate data. While Nestlé is a multinational outside LATAM scope, leaked corporate data can enable supply-chain targeting and B2B fraud affecting regional partners. Volume alone is moderate but worth verifying given the brand's global footprint.

27m

Leak● 55

Base de datos del Fondo de Pensiones de Rusia filtradaA BreachForums thread ('CaoMa') advertises a database attributed to the Russian Federation Pension Fund, a national social-security body. Pension records include identifiers, addresses and benefit data of high sensitivity for citizens. Even if partly recycled, it is a large government-sector leak worth tracking.

27m

Leak● 62

Filtración de datos del National Bank of PakistanA DarkForums thread ('Rylolixer') advertises a data leak from the National Bank of Pakistan, a major state-owned financial institution. Banking data leaks expose customer and account information usable for fraud and account takeover. Though outside LATAM, a large state-bank breach is material for financial-sector defenders.

27m

Leak● 70

Facturas del Instituto de Movilidad de Quintana Roo (IMOVEQROO) filtradasA DarkForums post advertises invoices belonging to IMOVEQROO, the Quintana Roo state mobility/transport authority in Mexico. Billing documents typically expose names, tax IDs and payment details, enabling fraud and impersonation. It is a government-sector leak relevant to Mexican public institutions.

27m

Leak● 88

Base de datos del Instituto Electoral de Chihuahua filtradaA DarkForums thread ('Kreztazal') advertises a database belonging to the State Electoral Institute of Chihuahua, a Mexican government body. Electoral databases typically contain voter identity, address and affiliation data, raising risks of doxxing, fraud and electoral-integrity attacks. This is a national-sensitive LATAM government leak requiring urgent verification.

27m